A vulnerability was found in Schiocco Support Board up to 3.7.7. It has been declared as critical. The affected element is an unknown function of the file /supportboard/include/ajax.php of the component Parameter Handler. Executing a manipulation of the argument calls[0][message_ids][] can lead to sql injection. This vulnerability appears as CVE-2026-4815. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.
| Vendor | Product | Versions |
|---|---|---|
| Schiocco | Support Board | 0 |
Updated severity to CRITICAL, marked as actively exploited, and provided a more detailed description of the vulnerability.
Initial creation
