CVE-2005-0462

Description

References

• lostmon.blogspot.com/2005/02/mercuryboard-forumphp-f-variable-xss.html
• secunia.com/advisories/13937 · Patch

mercuryboard 的其他漏洞

• CVE-2008-6632高危 7.5SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands vi…
• CVE-2005-0663高危 7.5SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter…
• CVE-2005-0662中危 4.3Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML …
• CVE-2005-0460中危 5.0index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter.
• CVE-2005-0414高危 7.5SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post ac…