GCVE - cpe:2.3:a:ideal_science:idealbb:1.4.9:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ideal_science:idealbb:1.4.9:*:*:*:*:*:*:*

part: a version: 1.4.9 update: *

Vendor	Ideal Science (`354e0334-f2e0-5ad4-ba50-4a90d2f57b34`)
Product	Idealbb (`ff2c0627-9c3a-53e5-8f7f-6fa736738f16`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-2318`	vulnerable	2026-06-08 04:49:06.311056	Details available Incomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to upload and execute an ASP script via a ".asa" file, which bypasses the check for the ".asp" extension but is executable on the server. Published: 2006-05-12T00:00:00.000Z Updated: 2024-08-07T17:43:29.151Z Open on db.gcve.eu Reference links http://www.osvdb.org/25456 http://secunia.com/advisories/20035 http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045887.html http://www.vupen.com/english/advisories/2006/1729 http://www.securityfocus.com/archive/1/433248/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2209`	vulnerable	2026-06-08 04:48:08.894589	Details available SQL injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Published: 2005-07-10T04:00:00.000Z Updated: 2024-08-08T01:22:12.369Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/11424 http://www.maxpatrol.com/mp_advisory.asp http://www.maxpatrol.com/advdetails.asp?id=14	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2208`	vulnerable	2026-06-08 04:48:08.894007	Details available CRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to conduct HTTP response splitting attacks via unknown vectors. Published: 2005-07-10T04:00:00.000Z Updated: 2024-09-17T04:14:42.245Z Open on db.gcve.eu Reference links http://www.maxpatrol.com/mp_advisory.asp http://www.maxpatrol.com/advdetails.asp?id=14 http://www.securityfocus.com/bid/11424	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2207`	vulnerable	2026-06-08 04:48:08.885524	Details available Cross-site scripting (XSS) vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Published: 2005-07-10T04:00:00.000Z Updated: 2024-09-17T03:27:53.268Z Open on db.gcve.eu Reference links http://www.maxpatrol.com/mp_advisory.asp http://www.maxpatrol.com/advdetails.asp?id=14 http://www.securityfocus.com/bid/11424	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.