CVE-2008-3035

Affected software: XchangeBoard 1.70 Final and earlier. Vulnerability: SQL injection in newThread.php via the boardID parameter. Impact: Allows remote authenticated users to execute arbitrary SQL commands (partial confidentiality, integrity, and availability impact per NVD). Root cause: Unsafegua...