Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Scssboard Subscribe
Filtered by product Scssboard
Total 6 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-5576 1 Scssboard 1 Scssboard 2017-09-28 7.5 HIGH N/A
admin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass authentication and gain administrative access via a large value of the current_user[users_level] parameter.
CVE-2008-5577 1 Scssboard 1 Scssboard 2017-09-28 7.5 HIGH N/A
PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to execute arbitrary PHP code via a URL in the inc_function parameter.
CVE-2008-5578 1 Scssboard 1 Scssboard 2017-09-28 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via (1) the f parameter in a showforum action, (2) the u parameter in a profile action, (3) the viewcat parameter, or (4) a combination of scb_uid and scb_ident cookie values.
CVE-2005-1068 1 Scssboard 1 Scssboard 2017-07-10 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via [url] tags.
CVE-2005-1069 1 Scssboard 1 Scssboard 2017-07-10 10.0 HIGH N/A
Unknown vulnerability in sCssBoard 1.11 and earlier has unknown impact, related to "an exploit on the Profile page."
CVE-2005-3837 1 Scssboard 1 Scssboard 2011-03-07 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the search module in sCssBoard 1.2 and 1.12, and earlier versions, allows remote attackers to inject arbitrary web script or HTML via the search_term parameter.