CVE-2004-1965

Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4) redirect parameter to index.php.

• http://marc.info/?l=bugtraq&m=108301983206107&w=2
• http://secunia.com/advisories/11481Exploit, Vendor Advisory
• http://securitytracker.com/id?1009935Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/10214Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15966
• http://marc.info/?l=bugtraq&m=108301983206107&w=2
• http://secunia.com/advisories/11481Exploit, Vendor Advisory
• http://securitytracker.com/id?1009935Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/10214Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15966

Published

Apr 25, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1959blocker_query.php in Protector System 1.15b1 for PHP-Nuke al…
• CVE-2004-1960Cross-site scripting (XSS) vulnerability in blocker_query.ph…
• CVE-2004-1961blocker.php in Protector System 1.15b1 allows remote attacke…
• CVE-2004-1962SQL injection vulnerability in index.php in Protector System…
• CVE-2004-1963nqt.php in Network Query Tool (NQT) 1.6 allows remote attack…
• CVE-2004-1964Cross-site scripting (XSS) vulnerability in nqt.php in Netwo…
• CVE-2004-1966Multiple SQL injection vulnerabilities in Open Bulletin Boar…
• CVE-2004-1967Cross-site request forgery (CSRF) vulnerabilities in (1) cp_…8.8
• CVE-2004-1968The readmsg action in myhome.php in Open Bulletin Board (Ope…
• CVE-2004-1969The avatar upload capability in Open Bulletin Board (OpenBB)…
• CVE-2004-1970Samsung SmartEther SS6215S switch, and possibly other Samsun…
• CVE-2004-1971modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allo…