Vulnerabilities > Philboard > Philboard > 1.14

DATE CVE VULNERABILITY TITLE RISK
2008-11-21 CVE-2008-5193 Cross-Site Scripting vulnerability in Philboard 1.14/1.2
Cross-site scripting (XSS) vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter.
network
philboard CWE-79
4.3
2008-11-21 CVE-2008-5192 SQL Injection vulnerability in Philboard 1.14/1.2
SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.
network
low complexity
philboard CWE-89
7.5