Security Advisory

CVE-2008-5578

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-12-15 17:45:00

Last updated 2024-08-07 10:56:47

Assigner mitre

State PUBLISHED

Description

Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via (1) the f parameter in a showforum action, (2) the u parameter in a profile action, (3) the viewcat parameter, or (4) a combination of scb_uid and scb_ident cookie values.

← Browse all CVEs View on cve.org ↗