Filtered by vendor Ekinboard Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2005-3638 1 Ekinboard 1 Ekinboard 2024-02-14 N/A
Cross-site scripting (XSS) vulnerabilities in Ekinboard 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in profile.php and (2) titles of posts.
CVE-2006-1130 1 Ekinboard 1 Ekinboard 2018-10-18 N/A
Cross-site scripting (XSS) vulnerability in EKINboard 1.0.3 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag.
CVE-2006-1129 1 Ekinboard 1 Ekinboard 2018-10-18 N/A
SQL injection vulnerability in config.php in EKINboard 1.0.3 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username cookie.
CVE-2008-7157 1 Ekinboard 1 Ekinboard 2017-09-29 N/A
Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading an avatar file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in uploaded/avatars/.
CVE-2008-7156 1 Ekinboard 1 Ekinboard 2017-09-29 N/A
EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by setting the _groups[] parameter to 2, as demonstrated via backup.php.