CVE-2007-1255

CVE-2007-1255 affects Connectix Boards 0.7 and earlier. An unrestricted file upload vulnerability in admin.bbcode.php allows remote authenticated administrators to execute arbitrary PHP code by uploading a crafted GIF image with a .php extension via the uploadimage parameter to admin.php, which c...

CVE-2007-1254

CVE-2007-1254 describes an SQL injection in part.userprofile.php of Connectix Boards

CVE-2008-0502

The CVE-2008-0502 entry documents a PHP remote file inclusion vulnerability in Connectix Boards (templates/Official/part_userprofile.php) affecting version 0.8.2 and earlier. The root cause is that the template_path parameter can be controlled to include an arbitrary URL, enabling remote attacker...