CVE-2026-4815
SQL Injection vulnerability in Support Board
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A SQL Injection vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to retrieve, create, update and delete database via 'calls[0][message_ids][]' parameter in '/supportboard/include/ajax.php' endpoint.
| CWE | CWE-89 |
| Vendor | schiocco |
| Product | support board |
| Published | Mar 25, 2026 |
| Last Updated | Mar 25, 2026 |
Stay Ahead of the Next One
Get instant alerts for schiocco support board
Be the first to know when new unknown vulnerabilities affecting schiocco support board are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Schiocco / Support Board
0 ≤ 3.7.7