CVE-2004-1965 in OpenBB
Summary
by MITRE
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4) redirect parameter to index.php.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 07/06/2025
The vulnerability identified as CVE-2004-1965 represents a critical cross-site scripting flaw affecting Open Bulletin Board version 1.0.6 and earlier implementations. This vulnerability resides in the application's handling of user-supplied input parameters within several key script files, creating exploitable entry points that allow remote attackers to execute malicious web scripts or HTML content within the context of other users' browsers. The flaw specifically manifests when the application fails to properly sanitize or validate input received through four distinct parameter names across different PHP files.
The technical implementation of this vulnerability stems from the application's insecure input handling practices where parameters such as redirect, to, TID, and redirect are directly incorporated into web responses without adequate sanitization or output encoding. When a user visits a maliciously crafted URL containing these parameters, the vulnerable application processes the input and reflects it back to the user's browser without proper security controls. This creates a persistent XSS condition where the injected malicious code executes in the victim's browser context, potentially leading to session hijacking, credential theft, or redirection to malicious sites.
From an operational impact perspective, this vulnerability poses significant risks to the confidentiality and integrity of user sessions within the OpenBB platform. Attackers can leverage these XSS flaws to steal session cookies, execute unauthorized actions on behalf of users, or redirect victims to phishing sites designed to capture credentials. The vulnerability affects the entire user base of affected installations and can be exploited through various attack vectors including email phishing campaigns, compromised advertisements, or direct URL manipulation. The widespread nature of bulletin board systems makes this vulnerability particularly dangerous as it can be exploited across multiple forums and community platforms using the same vulnerable software version.
The vulnerability aligns with CWE-79 which specifically addresses cross-site scripting flaws in web applications, and demonstrates characteristics consistent with the ATT&CK technique T1566.001 for Phishing via Social Media and T1566.002 for Spearphishing via Social Media. Organizations utilizing vulnerable OpenBB installations face potential compromise of user accounts, data leakage, and reputational damage. The attack surface extends beyond individual user sessions to potentially affect the entire community platform, as successful exploitation can enable attackers to post malicious content that persists across multiple user interactions. Mitigation strategies should include immediate patching of the OpenBB software to version 1.0.7 or later, implementation of input validation and output encoding controls, and deployment of web application firewalls to monitor and block suspicious parameter patterns. Additionally, security awareness training for administrators and users can help reduce the risk of exploitation through social engineering vectors that might leverage these vulnerabilities.