Vulnerabilities > Oaboard

DATE CVE VULNERABILITY TITLE RISK
2006-01-05 CVE-2006-0094 Code Injection vulnerability in Oaboard 1.0
PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc_stat parameter, a different vulnerability than CVE-2006-0076.
network
low complexity
oaboard CWE-94
7.5
2006-01-04 CVE-2006-0076 Remote File Include vulnerability in Oaboard 1.0
PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter.
network
low complexity
oaboard
7.5
2005-11-01 CVE-2005-3394 SQL Injection vulnerability in Oaboard 1.0
Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) channel parameter in the topics module and (2) topic parameter in the posting module.
network
low complexity
oaboard
7.5