Vulnerabilities

TI-2008-00723 CVE-2008-0757 · GHSA-4636-2x9q-q8q7

Cross-site scripting (XSS) vulnerability in index.php in MercuryBoard 1.1.5 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in MercuryBoard 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter (aka the message text area), which leads to an injectio…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2008-02-13 No fix listed CWE-79

TI-2005-01916 CVE-2005-2028 · GHSA-h9fx-fv39-r42q

SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote…

LOW 37

SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02066 Published 2005-06-21 No fix listed

TI-2005-00821 CVE-2005-0878 · GHSA-6c85-3xgv-h22r

Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a PM (private message).

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01164 Published 2005-03-26 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in index.php in MercuryBoard 1.1.5 allows remote…

SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote…

Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote…