ME
Vendor
Mercuryboard
11
CVEs
0
On KEV
0
New 30D
Products
ME–
Mercuryboard
Mercuryboard
8 CVEs0 on KEV0 new
MM–
Mercuryboard Message Board
Mercuryboard
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2008-6632 | ME Mercuryboard Mercuryboard | – | Apr 7 | SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header… |
| CVE-2008-0757 | MM Mercuryboard Message Board Mercuryboard | – | Feb 13 | Cross-site scripting (XSS) vulnerability in index.php in MercuryBoard 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter (aka the… |
| CVE-2005-2028 | MM Mercuryboard Message Board Mercuryboard | – | Jun 21 | SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header |
| CVE-2005-0460 | ME Mercuryboard Mercuryboard | – | May 2 | index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter |
| CVE-2005-0662 | ME Mercuryboard Mercuryboard | – | May 2 | Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the Avatar field |
| CVE-2005-0663 | ME Mercuryboard Mercuryboard | – | May 2 | SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter |
| CVE-2005-0414 | ME Mercuryboard Mercuryboard | – | Apr 27 | SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with (1) the t… |
| CVE-2005-0878 | MM Mercuryboard Message Board Mercuryboard | – | Mar 23 | Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a PM (private message) |
| CVE-2005-0462 | ME Mercuryboard Mercuryboard | – | Feb 17 | Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter |
| CVE-2005-0307 | ME Mercuryboard Mercuryboard | – | Jan 25 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a,… |
| CVE-2005-0306 | ME Mercuryboard Mercuryboard | – | Jan 25 | MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the… |