Priority LOW 22
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the URI to inc/lib/screen.php or (2) the title parameter to post.php.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01033 · Published 2007-07-30 · No fix listed
Priority LOW 25
Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to (1) forum.php, (2) cp.php, and possibly other unspecified components.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02404 · Published 2007-07-30 · No fix listed
Priority LOW 27
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) f, (3) quote, and (4) act parameters to cp.php; the (5) u paramet…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04376 · Published 2007-07-30 · No fix listed
Priority MEDIUM 45
Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to include arbitrary files via a ..
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.03793 · Published 2006-12-04 · No fix listed
Priority LOW 23
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the subject field of (1) a private message (PM) or (2) a bulletin board post.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01275 · Published 2006-12-04 · No fix listed
Priority MEDIUM 44
members.php in Vikingboard 0.1.2 allows remote attackers to trigger a forced SQL error via an invalid s parameter, a different vector than CVE-2006-4709.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02069 · Published 2006-12-04 · No fix listed
Priority LOW 25
SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands via the s parameter.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0106 · Published 2006-09-12 · No fix listed
Priority LOW 34
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01967 · Published 2006-09-12 · No fix listed