Unscored severity · published Dec 31, 2002
CVE-2002-1830
Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to moderator.php with the action and ismod…
–
CVSS
7.1%
EPSS
No
On KEV
Description
Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to moderator.php with the action and ismod parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.1% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openbb · Openbb
1.0.0_rc1; 1.0.0_rc2; 1.0.0_rc3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1830
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1830
marc.info
http://marc.info/?l=vuln-dev&m=102221487407632&w=2
www.iss.net
http://www.iss.net/security_center/static/9160.php
Exploit
http://www.securityfocus.com/bid/4823
More from Openbb
8.8
CVE-2004-1967
Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.php, or (6) moderator.php in Open…
4.3
CVE-2026-116108
openbq-org OpenBB Local API Server api_settings.py access control
–
CVE-2006-4722
PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path…
–
CVE-2005-2566
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter to board.php or (2) UID…
–
CVE-2005-1612
SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitrary SQL commands via the TID parameter