4 matches found
CVE-2008-4713
CVE-2008-4713 affects 212cafe Board 0.07. The vulnerability is a SQL injection in view.php, exploitable via the qID parameter, allowing remote attackers to execute arbitrary SQL commands. Connected records confirm the issue but do not provide patch/version details or explicit exploit steps. No re...
CVE-2007-0550
The CVE-2007-0550 entry concerns a Cross-Site Scripting (XSS) vulnerability in the search.php component of 212cafeBoard 0.08 Beta. The flaw allows remote attackers to inject arbitrary web script or HTML via the keyword parameter, as documented by the NVD entry with CVSS 2.0 base score 6.8 (Medium...
CVE-2007-0549
The CVE-2007-0549 entry describes a Cross-site Scripting (XSS) flaw in list3.php of 212cafeBoard 6.30 Beta, exploitable by supplying crafted content via the user parameter. This is the only concrete detail provided in the connected documents: the affected software is 212cafeBoard (version: 6.30 B...
CVE-2007-4719
CVE-2007-4719 describes a SQL injection in read.php of 212cafeBoard 6.30 Beta, exploitable via the id parameter to execute arbitrary SQL commands remotely. Affected component: read.php within 212cafeBoard 6.30 Beta. Root cause: unsafely concatenated input in SQL query exposes database to injectio...