GCVE - cpe:2.3:a:xennobb:xennobb:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:xennobb:xennobb:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4161`	vulnerable	2026-06-08 04:49:11.130482	Details available Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the category parameter. Published: 2006-08-16T21:00:00.000Z Updated: 2024-08-07T18:57:46.409Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19446 http://www.securityfocus.com/archive/1/442881/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/28337 http://securityreason.com/securityalert/1395 http://www.surfionline.com/security_advisories/20060810_xennobb_avatar_gallery_transversal.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4025`	vulnerable	2026-06-08 04:49:10.742254	Details available SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) bday_day, (2) bday_month, and (3) bday_year parameters in the personal section. Published: 2006-08-09T00:00:00.000Z Updated: 2024-08-07T18:57:44.214Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/28257 http://secunia.com/advisories/21409 http://www.securityfocus.com/bid/19374 http://securitytracker.com/id?1016643 http://www.securityfocus.com/archive/1/442423/100/0/threaded	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.