Vendor/product archive

epic_designs / tinybb CVEs

Beta · best-effort

3 CVEs tagged to epic_designs / tinybb — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to epic_designs vendor archive

CVE-2006-2739

Published Jun 1, 2006

PHP remote file inclusion vulnerability in footers.php in Epicdesigns tinyBB 0.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL…

CVSS 5.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-2740

Published Jun 1, 2006

Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) q parameter in (a) forgot.php, and the (2) us…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-2741

Published Jun 1, 2006

Cross-site scripting (XSS) vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers to inject arbitrary web script or HTML via the q parameter in forgot.php, which is echoed…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1