GCVE - cpe:2.3:a:scssboard:scssboard:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:scssboard:scssboard:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Scssboard (`2842b164-84e0-5c8e-8b3b-ee11b1b55025`)
Product	Scssboard (`324720b4-a462-5475-953c-21329b3e75f6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-5578`	vulnerable	2026-06-08 04:50:52.004917	Details available Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via (1) the f parameter in a showforum action, (2) the u parameter in a profile action, (3) the viewcat parameter, or (4) a combination of scb_uid and scb_ident cookie values. Published: 2008-12-15T17:45:00.000Z Updated: 2024-08-07T10:56:47.257Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/5149 http://www.securityfocus.com/bid/27866 http://securityreason.com/securityalert/4739	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5577`	vulnerable	2026-06-08 04:50:52.004549	Details available PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to execute arbitrary PHP code via a URL in the inc_function parameter. Published: 2008-12-15T17:45:00.000Z Updated: 2024-08-07T10:56:47.200Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/5149 http://securityreason.com/securityalert/4739 https://exchange.xforce.ibmcloud.com/vulnerabilities/47457	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5576`	vulnerable	2026-06-08 04:50:52.001796	Details available admin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass authentication and gain administrative access via a large value of the current_user[users_level] parameter. Published: 2008-12-15T17:45:00.000Z Updated: 2024-08-07T10:56:47.211Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/5149 http://securityreason.com/securityalert/4739 https://exchange.xforce.ibmcloud.com/vulnerabilities/47456	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1069`	not_vulnerable	2026-06-08 04:48:25.316047	Details available Unknown vulnerability in sCssBoard 1.11 and earlier has unknown impact, related to "an exploit on the Profile page." Published: 2005-04-12T04:00:00.000Z Updated: 2024-08-07T21:35:59.966Z Open on db.gcve.eu Reference links http://sourceforge.net/project/shownotes.php?release_id=318346 http://securitytracker.com/id?1013659 http://secunia.com/advisories/14694 https://exchange.xforce.ibmcloud.com/vulnerabilities/20022	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1068`	not_vulnerable	2026-06-08 04:48:25.314355	Details available Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via [url] tags. Published: 2005-04-12T04:00:00.000Z Updated: 2024-08-07T21:35:59.978Z Open on db.gcve.eu Reference links http://sourceforge.net/project/shownotes.php?release_id=318346 http://www.securityfocus.com/bid/13041 https://exchange.xforce.ibmcloud.com/vulnerabilities/20021 http://securitytracker.com/id?1013659 http://secunia.com/advisories/14694	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Scssboard

Notes

PURL mappings

Vulnerability references

Contribute