Mercuryboard

11 CVEs across 2 Mercuryboard products. Browse Mercuryboard vulnerabilities, severities, and proof-of-concept exploits.

Mercuryboard products with known CVEs

ProductCVEs
Mercuryboard8
Mercuryboard Message Board3
Mercuryboard CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-66322009-04-07SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HT…
CVE-2008-07572008-02-13Cross-site scripting (XSS) vulnerability in index.php in MercuryBoard 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the message para…
CVE-2005-20282005-06-21SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP h…
CVE-2005-06632005-05-02SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter.
CVE-2005-06622005-05-02Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the Avatar fiel…
CVE-2005-04602005-05-02index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter.
CVE-2005-04142005-04-27SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php…
CVE-2005-08782005-03-23Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a P…
CVE-2005-04622005-02-17Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter.
CVE-2005-03072005-01-25Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1…
CVE-2005-03062005-01-25MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error…