Show filters
10 Total Results
Displaying 1-10 of 10
Sort by:
Attacker Value
Unknown

CVE-2008-6632

Disclosure Date: April 07, 2009 (last updated October 04, 2023)
SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header ($_SERVER['HTTP_USER_AGENT']).
0
0
Attacker Value
Unknown

CVE-2005-2028

Disclosure Date: June 21, 2005 (last updated February 22, 2025)
SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
0
0
Attacker Value
Unknown

CVE-2005-0460

Disclosure Date: May 02, 2005 (last updated February 22, 2025)
index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter.
0
0
Attacker Value
Unknown

CVE-2005-0662

Disclosure Date: May 02, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the Avatar field.
0
0
Attacker Value
Unknown

CVE-2005-0663

Disclosure Date: May 02, 2005 (last updated February 22, 2025)
SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter.
0
0
Attacker Value
Unknown

CVE-2005-0414

Disclosure Date: April 27, 2005 (last updated February 22, 2025)
SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with (1) the t parameter or (2) the qu parameter.
0
0
Attacker Value
Unknown

CVE-2005-0878

Disclosure Date: March 23, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a PM (private message).
0
0
Attacker Value
Unknown

CVE-2005-0462

Disclosure Date: February 17, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter.
0
0
Attacker Value
Unknown

CVE-2005-0306

Disclosure Date: January 25, 2005 (last updated February 22, 2025)
MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the path in the resulting error message.
0
0
Attacker Value
Unknown

CVE-2005-0307

Disclosure Date: January 25, 2005 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6) re parameters.
0
0