CVE-2011-5090

GR Board (grboard) version 1.8.6.5 Community Edition exposes an unauthenticated ability to modify or delete data via specific endpoints: mod_rewrite.php, comment_write_ok.php, poll/index.php, update/index.php, trackback.php, or an arbitrary poll.php under theme/. The issue stems from missing auth...

CVE-2011-5091

GR Board (aka grboard) 1.8.6.5 Community Edition is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL via: view.php parameters tableType or blindTarget, view_memo.php parameter delTargets[0], or write_ok.php parameter isReported. The root caus...