Celerbb

celerbb

Vendor: Stewart Howe • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-0853 1Stewart Howe 1Celerbb Apr 23, 2026 Mar 9, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an adm...Show more login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an admin'# parameter value.Show less
CVE-2009-0852 1Stewart Howe 1Celerbb Apr 23, 2026 Mar 9, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter.
CVE-2009-0851 1Stewart Howe 1Celerbb Apr 23, 2026 Mar 9, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewforum.php and (2) viewtopic.php.