CVE-2004-1969

Impact

The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• http://marc.info/?l=bugtraq&m=108301983206107&w=2
• http://secunia.com/advisories/11481
• http://securitytracker.com/id?1009935
• http://www.securityfocus.com/bid/10218
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15971
• http://marc.info/?l=bugtraq&m=108301983206107&w=2
• http://secunia.com/advisories/11481
• http://securitytracker.com/id?1009935
• http://www.securityfocus.com/bid/10218
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15971