Approved changes feed: RSS · Atom
cpe:2.3:a:ideal_science:idealbb:1.5.0_beta1:*:*:*:*:*:*:*
part: a version: 1.5.0_beta1 update: *
| Vendor | Ideal Science (354e0334-f2e0-5ad4-ba50-4a90d2f57b34) |
|---|---|
| Product | Idealbb (ff2c0627-9c3a-53e5-8f7f-6fa736738f16) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-2321 |
vulnerable | 2026-06-08 04:49:06.318915 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2207.
Published: 2006-05-12T00:00:00.000Z
Updated: 2024-08-07T17:43:29.139Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2320 |
vulnerable | 2026-06-08 04:49:06.318298 |
Details available
Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors related to stored procedure calls. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2209.
Published: 2006-05-12T00:00:00.000Z
Updated: 2024-08-07T17:43:29.356Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2319 |
vulnerable | 2026-06-08 04:49:06.317639 |
Details available
Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script via a 0x00 character before the ".asp" portion of the filename.
Published: 2006-05-12T00:00:00.000Z
Updated: 2024-08-07T17:43:29.296Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2318 |
vulnerable | 2026-06-08 04:49:06.312114 |
Details available
Incomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to upload and execute an ASP script via a ".asa" file, which bypasses the check for the ".asp" extension but is executable on the server.
Published: 2006-05-12T00:00:00.000Z
Updated: 2024-08-07T17:43:29.151Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2317 |
vulnerable | 2026-06-08 04:49:06.299235 |
Details available
Unspecified vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to read arbitrary files under the web root via unspecified attack vectors related to the OpenTextFile method in Scripting.FileSystemObject.
Published: 2006-05-12T00:00:00.000Z
Updated: 2024-08-07T17:43:29.287Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.