CVE ID:	CVE-2004-1555
Description:	Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail parameter to forgot.asp.
Test IDs:	1.3.6.1.4.1.25623.1.0.14828
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1555 BugTraq ID: 11250 http://www.securityfocus.com/bid/11250 Bugtraq: 20040926 SQL injection in BroadBoard Instant ASP Message Board (Google Search) http://marc.info/?l=bugtraq&m=109630777608244&w=2 http://securitytracker.com/id?1011419 http://secunia.com/advisories/12658 XForce ISS Database: broadboard-forgotasp-sql-injection(17502) https://exchange.xforce.ibmcloud.com/vulnerabilities/17502 XForce ISS Database: broadboard-profileasp-sql-injection(17500) https://exchange.xforce.ibmcloud.com/vulnerabilities/17500 XForce ISS Database: broadboard-reg2asp-sql-injection(17501) https://exchange.xforce.ibmcloud.com/vulnerabilities/17501 XForce ISS Database: broadboard-searchasp-sql-injection(17498) https://exchange.xforce.ibmcloud.com/vulnerabilities/17498