Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote malicious users to execute arbitrary SQL commands via (1) the f parameter in a showforum action, (2) the u parameter in a profile action, (3) the viewcat parameter, or (4) a combination of scb_uid and scb_ident cookie values.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
scssboard scssboard 1.12 |
||
scssboard scssboard 1.0 |
||
scssboard scssboard 1.1 |
||
scssboard scssboard 1.11 |