← Database

CVE-2004-0343

CRITICAL CVSS: 10.0 Published: 2004-11-23 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL via (1) the msg parameter in ModifyMessage.php or (2) the postid parameter in ModifyMessage.php.

Affected Platforms

Yabb Yabb

Weakness Type

NVD-CWE-Other

References