Login Request a demo
OP
Product
OpenBB
by openbq-org · last CVE Oct 26, 2026
11
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 1Medium 1Low 0
Severity
All severities11Critical0High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add OpenBB to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2004-1967
8.8
2%
Apr 25
Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.php, or (6) moderator.php in Open…
Affected: 1.0.6
CVE-2026-116108
New
4.3
0%
Oct 26
openbq-org OpenBB Local API Server api_settings.py access control
Affected: 4.7.0; 4.7.1; 4.7.2; 5.0
CVE-2006-4722
–
3%
Sep 12
PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path…
Affected: through 1.0.8; 1.0.0_beta1; 1.0.0_rc1; 1.0.0_rc2; 1.0.0_rc3; 1.0.5; +1 more
CVE-2005-2566
–
1%
Aug 16
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter to board.php or (2) UID…
Affected: All versions, or not specified
CVE-2005-1612
–
2%
May 16
SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitrary SQL commands via the TID parameter
Affected: 1.0.8
CVE-2005-1613
–
4%
May 16
Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to inject arbitrary web script or HTML via the reverse…
Affected: 1.0.8
CVE-2004-1966
–
1%
Dec 31
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter in…
Affected: 1.0.0_beta1; 1.0.0_rc1; 1.0.0_rc2; 1.0.0_rc3; 1.0.5; 1.0.6; +1 more
CVE-2004-1968
–
3%
Apr 26
The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter
Affected: 1.0_.0_beta1; 1.0_.0_rc1; 1.0_.0_rc2; 1.0_.0_rc3; 1.0_.5; 1.0_.6
CVE-2002-1830
–
7%
Dec 31
Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to moderator.php with the action and ismod…
Affected: 1.0.0_rc1; 1.0.0_rc2; 1.0.0_rc3
CVE-2002-1829
–
4%
Dec 31
Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to inject arbitrary web script or HTML via (1)…
Affected: 1.0.0_rc3
CVE-2002-0330
–
8%
Jun 25
Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to execute arbitrary script and steal cookies via Javascript in…
Affected: 1.0.0_beta1; 1.0.0_rc1; 1.0.0_rc2
Showing 11