CVE-2008-5578

Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via (1) the f parameter in a showforum action, (2) the u parameter in a profile action, (3) the viewcat parameter, or (4) a combination of scb_uid and scb_ident cookie values.
Configurations

Configuration 1

cpe:2.3:a:scssboard:scssboard:1.11:*:*:*:*:*:*:*
cpe:2.3:a:scssboard:scssboard:1.1:*:*:*:*:*:*:*
cpe:2.3:a:scssboard:scssboard:1.0:*:*:*:*:*:*:*
cpe:2.3:a:scssboard:scssboard:1.12:*:*:*:*:*:*:*

Information

Published : 2008-12-15 06:00

Updated : 2017-09-29 01:32


NVD link : CVE-2008-5578

Mitre link : CVE-2008-5578

Products Affected
No products.
CWE