Xchangeboard

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xchangeboard records in CISA KEV

No Xchangeboard vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xchangeboard 3 records LOW

Records

3 records

TI-2006-05299 CVE-2006-5488 · GHSA-ppwc-gv27-xgpv

SQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when…

LOW 35

SQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the loginNick parameter during login.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01192 Published 2006-10-25 No fix listed

TI-2008-02905 CVE-2008-3035 · GHSA-4jx6-7475-4qwh

SQL injection vulnerability in newThread.php in XchangeBoard 1.70 Final and earlier…

LOW 31

SQL injection vulnerability in newThread.php in XchangeBoard 1.70 Final and earlier allows remote authenticated users to execute arbitrary SQL commands via the boardID parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00895 Published 2008-07-07 No fix listed CWE-89

TI-2006-05311 CVE-2006-5500 · GHSA-mpwq-52cf-rphx

Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php…

LOW 25

Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php in XchangeBoard 1.70 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via th…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.00891 Published 2006-10-25 No fix listed

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0