PT-2004-2959 · Antiboard · Antiboard

Josh Gilmour · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2063

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AntiBoard versions 0.7.2 and earlier

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary HTML or web script via the feedback parameter in the antiboard.php file.

Recommendations For AntiBoard versions 0.7.2 and earlier, avoid using the feedback parameter in the antiboard.php file until a fix is available. As a temporary workaround, consider restricting access to the antiboard.php file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2004-2063

Affected Products

Antiboard

References · 8

• 🔥 http://securityfocus.com/bid/10821 · Exploit
• 🔥 https://exploit-db.com/exploits/24330 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2063 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16830 · Note
• http://osvdb.org/8269 · Note
• http://marc.info/?l=bugtraq&m=109105610220965&w=2 · Note
• http://secunia.com/advisories/12137 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2063 · Note