Approved changes feed: RSS · Atom

cpe:2.3:a:schiocco:support_board:3.7.8:*:*:*:*:*:*:*

part: a version: 3.7.8 update: *

VendorSchiocco (d6f6484d-996d-502d-a7d7-bd3075b60376)
ProductSupport Board (6c3f6de9-e141-577e-bc9d-34c54b0c7eec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4816 not_vulnerable 2026-06-08 08:07:02.415041 Reflected Cross Site Scripting (XSS) vulnerability in Support Board
A Reflected Cross Site Scripting (XSS) vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the 'search' parameter in '/supportboard/include/articles.php'. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.
Published: 2026-03-25T13:31:47.952Z
Updated: 2026-03-25T14:56:58.775Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4815 not_vulnerable 2026-06-08 08:07:02.413337 SQL Injection vulnerability in Support Board
A SQL Injection vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to retrieve, create, update and delete database via 'calls[0][message_ids][]' parameter in '/supportboard/include/ajax.php' endpoint.
Published: 2026-03-25T13:31:52.953Z
Updated: 2026-03-25T17:41:55.649Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.