cbcvebase.
CVE-2008-6632
published 2009-04-07

CVE-2008-6632: SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent…

PriorityP343high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
0.97%
57.3th percentile
SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header ($_SERVER['HTTP_USER_AGENT']).

Affected

5 ranges
VendorProductVersion rangeFixed in
mercuryboardmercuryboard<= 1.1.5—
mercuryboardmercuryboard——
mercuryboardmercuryboard——
mercuryboardmercuryboard——
mercuryboardmercuryboard——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.