CVE-2008-4333

Summary (CVE-2008-4333): The vulnerability is a cross-site scripting (XSS) flaw in the PHP infoBoard V.7 Plus product, exploitable via the isname parameter in a newtopic action. This allows remote attackers to inject arbitrary web script or HTML. The affected component is the topic creation path ...

CVE-2008-4332

CVE-2008-4332 affects PHP infoBoard V.7 Plus. The vulnerability is an SQL injection in the showjavatopic function (func.php) that allows an attacker to manipulate SQL via the idcat parameter to showtopic.php. This could enable arbitrary SQL execution, depending on the database permissions. The co...

CVE-2008-4334

The CVE-2008-4334 issue affects PHP infoBoard V.7 Plus, where remote attackers can bypass authentication and gain administrative access by setting the infouser cookie to 1. This is described across multiple sources (NVD, CVE records, and related databases). The available documents do not provide ...