Approved changes feed: RSS · Atom

cpe:2.3:a:nextbbs:nextbbs:0.6:*:*:*:*:*:*:*

part: a version: 0.6 update: *

VendorNextbbs (2fd317f4-84fb-55aa-a0fd-a40806c5aba4)
ProductNextbbs (3daffdf9-acf5-50ad-b01b-87235d7f2847)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1604 vulnerable 2026-06-08 05:00:49.816284 Details available
Cross-site scripting (XSS) vulnerability in NextBBS 0.6 allows remote attackers to inject arbitrary web script or HTML via the do parameter to index.php.
Published: 2012-10-01T23:00:00.000Z
Updated: 2024-09-16T22:50:58.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1603 vulnerable 2026-06-08 05:00:49.815891 Details available
Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL commands via the (1) curstr parameter in the findUsers function, (2) id parameter in the isIdAvailable function, or (3) username parameter in the getGreetings function.
Published: 2012-10-01T23:00:00.000Z
Updated: 2024-09-17T02:37:03.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1602 vulnerable 2026-06-08 05:00:49.815414 Details available
user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1.
Published: 2012-10-01T23:00:00.000Z
Updated: 2024-09-16T18:29:53.362Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.