CVE-2008-5578

Severity CVSS v4.0:
Pending analysis
Type:
CWE-89 SQL Injection
Publication date:
15/12/2008
Last modified:
09/04/2025

Description

Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via (1) the f parameter in a showforum action, (2) the u parameter in a profile action, (3) the viewcat parameter, or (4) a combination of scb_uid and scb_ident cookie values.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:scssboard:scssboard:1.0:*:*:*:*:*:*:*
cpe:2.3:a:scssboard:scssboard:1.1:*:*:*:*:*:*:*
cpe:2.3:a:scssboard:scssboard:1.11:*:*:*:*:*:*:*
cpe:2.3:a:scssboard:scssboard:1.12:*:*:*:*:*:*:*