CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2008-6632

SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header ($_SERVER['HTTP_USER_AGENT']).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.0%

CVSS Severity

CVSS v2 Score 7.5

References

http://www.securityfocus.com/bid/29280
https://exchange.xforce.ibmcloud.com/vulnerabilities/42519
https://www.exploit-db.com/exploits/5653
http://www.securityfocus.com/bid/29280
https://exchange.xforce.ibmcloud.com/vulnerabilities/42519
https://www.exploit-db.com/exploits/5653

Products affected by CVE-2008-6632

Mercuryboard » Mercuryboard » Version: Any

cpe:2.3:a:mercuryboard:mercuryboard:*
Mercuryboard » Mercuryboard » Version: 1.0

cpe:2.3:a:mercuryboard:mercuryboard:1.0
Mercuryboard » Mercuryboard » Version: 1.1

cpe:2.3:a:mercuryboard:mercuryboard:1.1
Mercuryboard » Mercuryboard » Version: 1.1.1

cpe:2.3:a:mercuryboard:mercuryboard:1.1.1
Mercuryboard » Mercuryboard » Version: 1.1.2

cpe:2.3:a:mercuryboard:mercuryboard:1.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-6632

Products

Pricing

Contact Us