Vulnerabilities > Philboard

DATE CVE VULNERABILITY TITLE RISK
2008-11-21 CVE-2008-5193 Cross-Site Scripting vulnerability in Philboard 1.14/1.2
Cross-site scripting (XSS) vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter.
network
philboard CWE-79
4.3
2008-11-21 CVE-2008-5192 SQL Injection vulnerability in Philboard 1.14/1.2
SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.
network
low complexity
philboard CWE-89
7.5
2007-02-14 CVE-2007-0920 SQL Injection vulnerability in Philboard Philboard_forum.ASP
SQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter.
network
low complexity
philboard
7.5