CVE-2008-6958: Comsenz Crossday Discuz! Board

Medium severity, CVSS 6.5. EPSS: 5.8% chance of exploitation in the next 30 days.

wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter.

Affected products

• Comsenz Crossday Discuz! Board: version 6.0.1 only; version 7.0 only

Published 2009-08-12. Last modified 2026-06-16.