Vulnerabilities

TI-2008-04133 CVE-2008-4334 · GHSA-254v-xjfq-x8gj

PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain…

LOW 37

PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the infouser cookie to 1.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02333 Published 2008-09-30 No fix listed CWE-264

TI-2008-04132 CVE-2008-4333 · GHSA-cmx5-3883-g73v

Cross-site scripting (XSS) vulnerability in PHP infoBoard V.7 Plus allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in PHP infoBoard V.7 Plus allows remote attackers to inject arbitrary web script or HTML via the isname parameter in a newtopic action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2008-09-30 No fix listed CWE-79

TI-2008-04131 CVE-2008-4332 · GHSA-445m-8qw7-7x42

SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard…

LOW 37

SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL commands via the idcat parameter to showtopic.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0199 Published 2008-09-30 No fix listed CWE-89

Vulnerabilities

Filters

PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain…

Cross-site scripting (XSS) vulnerability in PHP infoBoard V.7 Plus allows remote…

SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard…