GCVE - cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:*

part: a version: 1.1.1 update: *

Vendor	Mercuryboard (`9453162a-44ea-59b5-acc6-cda61c82a96a`)
Product	Mercuryboard (`b42d4575-b097-5a05-bb8a-d315dafc3aa1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-6632`	vulnerable	2026-06-08 04:51:04.451544	Details available SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header ($_SERVER['HTTP_USER_AGENT']). Published: 2009-04-07T10:00:00.000Z Updated: 2024-08-07T11:34:47.198Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/29280 https://www.exploit-db.com/exploits/5653 https://exchange.xforce.ibmcloud.com/vulnerabilities/42519	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0462`	vulnerable	2026-06-08 04:48:12.713749	Details available Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter. Published: 2005-02-17T05:00:00.000Z Updated: 2024-08-07T21:13:54.279Z Open on db.gcve.eu Reference links http://secunia.com/advisories/13937 http://lostmon.blogspot.com/2005/02/mercuryboard-forumphp-f-variable-xss.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0460`	vulnerable	2026-06-08 04:48:12.707885	Details available index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter. Published: 2005-02-17T05:00:00.000Z Updated: 2024-08-07T21:13:54.287Z Open on db.gcve.eu Reference links http://www.osvdb.org/13787 http://secunia.com/advisories/14284 http://lostmon.blogspot.com/2005/02/mercuryboard-debug-information.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0414`	vulnerable	2026-06-08 04:48:12.574621	Details available SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with (1) the t parameter or (2) the qu parameter. Published: 2005-02-14T05:00:00.000Z Updated: 2024-08-07T21:13:54.147Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=110661795632354&w=2 http://cvs.sunsite.dk/viewcvs.cgi/mercury/func/post.php.diff?r1=1.68&r2=1.70 http://securitytracker.com/id?1013137 http://marc.info/?l=bugtraq&m=110797495532358&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19051	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0307`	vulnerable	2026-06-08 04:48:12.225274	Details available Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6) re parameters. Published: 2005-02-10T05:00:00.000Z Updated: 2024-08-07T21:05:25.597Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=110661795632354&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19050 http://www.securityfocus.com/bid/12359	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0306`	vulnerable	2026-06-08 04:48:12.224890	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.