TI-2026-28055 CVE-2026-37505 · GHSA-p9jr-g3jg-h6r7
SQL Injection via ORDER BY clause in V2Board thru 1.7.4.
Priority LOW 22
SQL Injection via ORDER BY clause in V2Board thru 1.7.4.
Vulnerabilities
4 records
TI-2026-28054 CVE-2026-37504 · GHSA-w5vg-8gx8-5cjf
Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4.
Priority LOW 33
Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4.
TI-2026-28053 CVE-2026-37503 · GHSA-4jxj-79x3-676q
Cross-Site Scripting (XSS) in V2Board thru 1.7.4.
Priority LOW 30
Cross-Site Scripting (XSS) in V2Board thru 1.7.4.
TI-2026-28784 CVE-2026-39912 · GHSA-83h9-46h8-whf4
v2board / Xboard Authentication Token Exposure via loginWithMailLink
Priority HIGH 80
V2Board 1.6.1 through 1.7.4 and Xboard through 0.1.9 expose authentication tokens in HTTP response bodies of the loginWithMailLink endpoint when the login_with_mail_link_enable feature is active.