Vulnerabilities

TI-2008-06845 CVE-2008-7157 · GHSA-gx6f-p25m-6rvf

Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote…

LOW 36

Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading an avatar file with an executable extension followed by a safe extension, then accessin…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03326 Published 2009-09-02 No fix listed CWE-264

TI-2008-06844 CVE-2008-7156 · GHSA-pg2r-wh7x-6w9p

EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to…

LOW 34

EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by setting the _groups[] parameter to 2, as demonstrated via backup.php.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01906 Published 2009-09-02 No fix listed CWE-287

TI-2006-01097 CVE-2006-1130 · GHSA-fjp4-pj6p-fm94

Cross-site scripting (XSS) vulnerability in EKINboard 1.0.3 allows remote attackers to…

LOW 24

Cross-site scripting (XSS) vulnerability in EKINboard 1.0.3 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01853 Published 2006-03-10 No fix listed

TI-2006-01096 CVE-2006-1129 · GHSA-p6r9-2gjw-h8mx

SQL injection vulnerability in config.php in EKINboard 1.0.3 allows remote attackers to…

LOW 37

SQL injection vulnerability in config.php in EKINboard 1.0.3 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username cookie.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02037 Published 2006-03-10 No fix listed

TI-2005-03433 CVE-2005-3638 · GHSA-qr7c-hh68-587x

Cross-site scripting (XSS) vulnerabilities in Ekinboard 1.0.3 allow remote attackers to…