CVE-2008-6632

SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header ($_SERVER['HTTP_USER_AGENT']).

Link	Resource
http://www.securityfocus.com/bid/29280	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/42519
https://www.exploit-db.com/exploits/5653

Configuration 1

cpe:2.3:a:mercuryboard:mercuryboard:1.1:*:*:*:*:*:*:* cpe:2.3:a:mercuryboard:mercuryboard:*:*:*:*:*:*:*:* cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:* cpe:2.3:a:mercuryboard:mercuryboard:1.0:*:*:*:*:*:*:* cpe:2.3:a:mercuryboard:mercuryboard:1.1.2:*:*:*:*:*:*:*

---

Published : 2009-04-07 02:17

Updated : 2017-09-29 01:33

---

NVD link : CVE-2008-6632

Mitre link : CVE-2008-6632

Mercuryboard

CWE-89