7.5
CVSSv2

CVE-2014-9215

Published: 05/12/2014 Updated: 09/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in the CheckEmail function in includes/functions.class.php in PBBoard 3.0.1 prior to 20141128 allows remote malicious users to execute arbitrary SQL commands via the email parameter in the register page to index.php. NOTE: the email parameter in the forget page vector is already covered by CVE-2012-4034.2.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

pbboard pbboard

Exploits

Vulnerability title: SQL Injection in PBBoard CMS CVE: CVE-2014-9215 CMS: PBBoard Vendor: Power bulletin board - wwwpbboardinfo/ Product: sourceforgenet/projects/pbboard/files/PBBoard_v301/PBBoard_v301zip/download Affected version: Version 301 (updated on 13/09/2014) and before Fixed version: Version 301 (updated on 28/11 ...
PBBoard CMS version 301 (updated on 13/09/2014) and below suffer from multiple remote SQL injection vulnerabilities ...