Vulnerabilities

TI-2008-02452 CVE-2008-2561 · GHSA-gj46-x637-rvfx

Multiple cross-site scripting (XSS) vulnerabilities in 427BB 2.3.1 allow remote attackers…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in 427BB 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to (a) register.php, (b) reminder.php, and (c) search.php; the (2) un…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01524 Published 2008-06-06 No fix listed CWE-79

TI-2008-02451 CVE-2008-2560 · GHSA-99pp-98hh-563p

SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to…

LOW 35

SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the post parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0101 Published 2008-06-06 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in 427BB 2.3.1 allow remote attackers…

SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to…