Vulnerabilities

TI-2008-02905 CVE-2008-3035 · GHSA-4jx6-7475-4qwh

SQL injection vulnerability in newThread.php in XchangeBoard 1.70 Final and earlier…

LOW 31

SQL injection vulnerability in newThread.php in XchangeBoard 1.70 Final and earlier allows remote authenticated users to execute arbitrary SQL commands via the boardID parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00895 Published 2008-07-07 No fix listed CWE-89

TI-2006-05311 CVE-2006-5500 · GHSA-mpwq-52cf-rphx

Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php…

LOW 25

Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php in XchangeBoard 1.70 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via th…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.00891 Published 2006-10-25 No fix listed

TI-2006-05299 CVE-2006-5488 · GHSA-ppwc-gv27-xgpv

SQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when…

LOW 35

SQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the loginNick parameter during login.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01192 Published 2006-10-25 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in newThread.php in XchangeBoard 1.70 Final and earlier…

Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php…

SQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when…