CVE-2011-4066: Sir Gnuboard

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO.

Affected products

• Sir Gnuboard: up to and including 4.33.02; version 3.30 only; version 3.31 only; version 3.32 only; version 3.33 only; version 3.34 only; …

Published 2011-11-04. Last modified 2026-06-16.