Approved changes feed: RSS · Atom

cpe:2.3:a:grboard:grboard:1.8.6.5:*:community:*:*:*:*:*

part: a version: 1.8.6.5 update: *

VendorGrboard (7e1fb655-728c-5755-b15b-ae55bd9dbda7)
ProductGrboard (5dfabd7c-5e2c-5fb4-a3be-89d0c67eff9d)
Editioncommunity
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/claztec/grboard purl2cpe 2026-06-01 10:15:51.487378

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-5091 vulnerable 2026-06-08 04:59:34.555343 Details available
Multiple SQL injection vulnerabilities in GR Board (aka grboard) 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL commands via the (1) tableType or (2) blindTarget parameter to view.php, (3) the delTargets[0] parameter to view_memo.php, or (4) the isReported parameter to write_ok.php.
Published: 2012-05-24T00:00:00.000Z
Updated: 2024-08-07T00:23:40.198Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5090 vulnerable 2026-06-08 04:59:34.554978 Details available
GR Board (aka grboard) 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to (1) mod_rewrite.php, (2) comment_write_ok.php, (3) poll/index.php, (4) update/index.php, (5) trackback.php, or (6) an arbitrary poll.php script under theme/.
Published: 2012-05-24T00:00:00.000Z
Updated: 2024-08-07T00:23:39.855Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.