CVE-2008-3035

  • Last update: Apr 13, 2023

Description

SQL injection vulnerability in newThread.php in XchangeBoard 1.70 Final and earlier allows remote authenticated users to execute arbitrary SQL commands via the boardID parameter.

Software From Fixed in
xchangeboard / xchangeboard - 1.70.x

Details

    • Severity: Medium
  • CVE: CVE-2008-3035
  • Published: Jul 7, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs

OWASP TOP 10