CVE-2008-5578 Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via (1) the f parameter in a showforum action, (2) th...
HighCVSS 7.5
EPSS 1.00%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via (1) the f parameter in a showforum action, (2) the u parameter in a profile action, (3) the viewcat parameter, or (4) a combination of scb_uid and scb_ident cookie values.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| scssboard | = 1.0 | No fix listed |
| scssboard | = 1.1 | No fix listed |
| scssboard | = 1.11 | No fix listed |
| scssboard | = 1.12 | No fix listed |