Vulnerabilities

TI-2026-28055 CVE-2026-37505 · GHSA-p9jr-g3jg-h6r7

SQL Injection via ORDER BY clause in V2Board thru 1.7.4.

LOW 22

SQL Injection via ORDER BY clause in V2Board thru 1.7.4.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00244 Published 2026-05-01 No fix listed CWE-89

TI-2026-28054 CVE-2026-37504 · GHSA-w5vg-8gx8-5cjf

LOW 33

Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00286 Published 2026-05-01 No fix listed CWE-598

TI-2026-28053 CVE-2026-37503 · GHSA-4jxj-79x3-676q

LOW 30

Cross-Site Scripting (XSS) in V2Board thru 1.7.4.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00191 Published 2026-05-01 No fix listed CWE-79