Volerion logoVolerion
Volerion logoVolerion

Support Board SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability exists in Support Board version 3.7.7. This issue allows attackers to manipulate the database by retrieving, creating, updating, or deleting data. The vulnerability is triggered through the 'calls[0][message_ids][]' parameter in the '/supportboard/include/ajax.php' endpoint.

Impact

Exploitation of this vulnerability allows for unauthorized database manipulation, including retrieval, creation, updating, and deletion of database records.

Remediation

Users can upgrade to Support Board version 3.7.8, released in February 2025, to address this vulnerability.

Added: Mar 25, 2026, 2:20 PM
Updated: Mar 25, 2026, 2:20 PM

Vulnerability Rating

Custom Algorithm
spread
2.2
impact
3.1
exploitability
5.4
remediation
7.7
relevance
4.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.