Gravityboardx Gravity Board X vulnerabilities
4 known vulnerabilities affecting gravityboardx/gravity_board_x.
Total CVEs
4
CISA KEV
0
Public exploits
4
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2009-1278P3HIGHCVSS 7.5PoCv2.02009-04-09
CVE-2009-1278 [HIGH] CWE-94 CVE-2009-1278: Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA al
Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php.
nvd
CVE-2009-1277P3HIGHCVSS 7.5PoCv2.02009-04-09
CVE-2009-1277 [HIGH] CVE-2009-1277: SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers t
SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the member_id parameter in a viewprofile action. NOTE: the board_id issue is already covered by CVE-2008-2996.2.
nvd
CVE-2008-2996P3MEDIUMCVSS 6.8PoCv2.02008-07-03
CVE-2008-2996 [MEDIUM] CWE-89 CVE-2008-2996: Multiple SQL injection vulnerabilities in index.php in Gravity Board X (GBX) 2.0 Beta, when magic_qu
Multiple SQL injection vulnerabilities in index.php in Gravity Board X (GBX) 2.0 Beta, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchquery parameter in a getsearch action, and the (2) board_id parameter in a viewboard action.
nvd
CVE-2008-2997P4MEDIUMCVSS 4.3PoCv2.02008-07-03
CVE-2008-2997 [MEDIUM] CWE-79 CVE-2008-2997: Cross-site scripting (XSS) vulnerability in index.php in Gravity Board X (GBX) 2.0 Beta allows remot
Cross-site scripting (XSS) vulnerability in index.php in Gravity Board X (GBX) 2.0 Beta allows remote attackers to inject arbitrary web script or HTML via the subject parameter in a postnewsubmit (aka create new thread) action.
nvd