RSS   Vulnerabilities for 'Mercuryboard message board'   RSS

2008-02-13
 
CVE-2008-0757

CWE-79
 

 
Cross-site scripting (XSS) vulnerability in index.php in MercuryBoard 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter (aka the message text area), which leads to an injection in the messenger during private message (PM) preview. NOTE: some of these details are obtained from third party information.

 
2005-06-21
 
CVE-2005-2028

 

 
SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.

 
2005-03-23
 
CVE-2005-0878

 

 
Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a PM (private message).

 

 >>> Vendor: Mercuryboard 2 Products
Mercuryboard
Mercuryboard message board


Copyright 2024, cxsecurity.com

 

Back to Top