<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: scssboard</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2008-5578: Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attacke</title><link>https://patchthecve.com/cve/CVE-2008-5578.html</link><guid>https://patchthecve.com/cve/CVE-2008-5578.html</guid><pubDate>Tue, 16 Jun 2026 23:00:36 +0000</pubDate><description>HIGH 7.5: Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via (1) the f parameter in a showforum action, (2) the u parameter in a profile action, (3) the viewcat parameter, or (4) a combination of scb_uid and sc</description></item><item><title>CVE-2008-5577: PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attac</title><link>https://patchthecve.com/cve/CVE-2008-5577.html</link><guid>https://patchthecve.com/cve/CVE-2008-5577.html</guid><pubDate>Tue, 16 Jun 2026 23:00:36 +0000</pubDate><description>HIGH 7.5: PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to execute arbitrary PHP code via a URL in the inc_function parameter.</description></item><item><title>CVE-2008-5576: admin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass authentication and ga</title><link>https://patchthecve.com/cve/CVE-2008-5576.html</link><guid>https://patchthecve.com/cve/CVE-2008-5576.html</guid><pubDate>Tue, 16 Jun 2026 23:00:36 +0000</pubDate><description>HIGH 7.5: admin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass authentication and gain administrative access via a large value of the current_user[users_level] parameter.</description></item></channel></rss>