Approved changes feed: RSS · Atom

cpe:2.3:a:gravityboardx:gravity_board_x:2.0:beta:*:*:*:*:*:*

part: a version: 2.0 update: beta

VendorGravityboardx (491a712d-c5a9-58b4-a34c-4937920a4c7c)
ProductGravity Board X (ffa179b2-0447-5fd7-8afc-b2f307ba69be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/gbx purl2cpe 2026-06-01 10:17:56.659638

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1278 vulnerable 2026-06-08 04:51:14.303236 Details available
Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php.
Published: 2009-04-09T16:00:00.000Z
Updated: 2024-08-07T05:04:49.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1277 vulnerable 2026-06-08 04:51:14.302828 Details available
SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the member_id parameter in a viewprofile action. NOTE: the board_id issue is already covered by CVE-2008-2996.2.
Published: 2009-04-09T16:00:00.000Z
Updated: 2024-08-07T05:04:49.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2997 vulnerable 2026-06-08 04:50:32.779282 Details available
Cross-site scripting (XSS) vulnerability in index.php in Gravity Board X (GBX) 2.0 Beta allows remote attackers to inject arbitrary web script or HTML via the subject parameter in a postnewsubmit (aka create new thread) action.
Published: 2008-07-03T17:47:00.000Z
Updated: 2024-08-07T09:21:34.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2996 vulnerable 2026-06-08 04:50:32.778886 Details available
Multiple SQL injection vulnerabilities in index.php in Gravity Board X (GBX) 2.0 Beta, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchquery parameter in a getsearch action, and the (2) board_id parameter in a viewboard action.
Published: 2008-07-03T17:47:00.000Z
Updated: 2024-08-07T09:21:34.443Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.