CVE-2005-0414: Mercuryboard

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with (1) the t parameter or (2) the qu parameter.

Affected products

• Mercuryboard Mercuryboard: version 1.1.1 only

Published 2005-04-27. Last modified 2026-06-16.