This page aggregates publicly disclosed CVE and security risk information related to battleaxe_software, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2006-0974 | Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script or HTML via the err_txt parameter. | [email protected] | 4.3 | 1.87% | 2006-03-03 | 2026-04-16 |
| CVE-2005-1570 | forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument to the page parameter, possibly due to a SQL injection vulnerability. | [email protected] | 5.0 | 1.18% | 2005-05-14 | 2026-04-16 |
| CVE-2003-0215 | SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (2) password fields, and possibly other fields. | [email protected] | 7.5 | 1.25% | 2003-05-12 | 2026-06-16 |