CVE-2007-1254: Connectix Boards

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitrary SQL commands and obtain privileges via the p_skin parameter to index.php.

Affected products

• Connectix Connectix Boards: version 0.4 only; version 0.4.1 only; version 0.4.2 only; version 0.4.3 only; version 0.4.4 only; version 0.5 only; …

Published 2007-03-03. Last modified 2026-06-16.