Thwboard » Thwboard Beta : Security Vulnerabilities, CVEs,
Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in calendar.php, (2) user parameter array in v_profile.php, and (3) the userid parameter in misc.php.
Max CVSS
7.5
EPSS Score
0.97%
Published
2005-12-09
Updated
2018-10-19
Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the lastvisited parameter.
Max CVSS
4.3
EPSS Score
0.36%
Published
2004-12-31
Updated
2017-07-11
2 vulnerabilities found