CVE-2004-1555

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail parameter to forgot.asp.

Affected products

Broadboard Instant Asp Message Board: all versions

References

http://marc.info/?l=bugtraq&m=109630777608244&w=2
http://secunia.com/advisories/12658
http://securitytracker.com/id?1011419
http://www.securityfocus.com/bid/11250
https://exchange.xforce.ibmcloud.com/vulnerabilities/17498
https://exchange.xforce.ibmcloud.com/vulnerabilities/17500
https://exchange.xforce.ibmcloud.com/vulnerabilities/17501
https://exchange.xforce.ibmcloud.com/vulnerabilities/17502
http://marc.info/?l=bugtraq&m=109630777608244&w=2
http://secunia.com/advisories/12658
http://securitytracker.com/id?1011419
http://www.securityfocus.com/bid/11250

Get alerted when CVE-2004-1555 or the next vulnerability affects your stack