Lucene search

Php Infoboard Security Vulnerabilities

cve

CVE-2008-4332

SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL commands via the idcat parameter to showtopic.php.

8.4AI Score

0.001EPSS

2008-09-30 05:22 PM

cve

CVE-2008-4333

Cross-site scripting (XSS) vulnerability in PHP infoBoard V.7 Plus allows remote attackers to inject arbitrary web script or HTML via the isname parameter in a newtopic action.

5.8AI Score

0.002EPSS

2008-09-30 05:22 PM

cve

CVE-2008-4334

PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the infouser cookie to 1.

7.3AI Score

0.01EPSS

2008-09-30 05:22 PM