CVE-2005-3686: Newsboard Unclassified Newsboard

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to execute arbitrary SQL commands via the (1) DateFrom or (2) DateUntil parameter to forum.php.

Affected products

• Newsboard Unclassified Newsboard: up to and including 1.5.3_patch3

Published 2005-11-19. Last modified 2026-06-16.