ME
Product
Mercuryboard
by Mercuryboard · last CVE Apr 7, 2009
8
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add Mercuryboard to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2008-6632
–
1%
Apr 7
SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header…
Affected: through 1.1.5; 1.0; 1.1; 1.1.1; 1.1.2
CVE-2005-0460
–
2%
May 2
index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter
Affected: 1.0; 1.1; 1.1.1
CVE-2005-0662
–
1%
May 2
Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the Avatar field
Affected: 1.1.2
CVE-2005-0663
–
2%
May 2
SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter
Affected: 1.1.2
CVE-2005-0414
–
1%
Apr 27
SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with (1) the t…
Affected: 1.1.1
CVE-2005-0462
–
1%
Feb 17
Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter
Affected: 1.0; 1.1; 1.1.1
CVE-2005-0306
–
1%
Jan 25
MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the…
Affected: 1.1; 1.1.1
CVE-2005-0307
–
2%
Jan 25
Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a,…
Affected: 1.1; 1.1.1
Showing 8