Lucene search

K
cve[email protected]CVE-2007-1518
HistoryMar 20, 2007 - 8:19 p.m.

CVE-2007-1518

2007-03-2020:19:00
web.nvd.nist.gov
19
cve-2007-1518
sql injection
woltlab burning board
nvd
usergroups.php
applicationids array

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.8%

SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array.

Affected configurations

NVD
Node
woltlabburning_boardMatch2.0
OR
woltlabburning_boardMatch2.0.3
OR
woltlabburning_boardMatch2.0_beta_3
OR
woltlabburning_boardMatch2.0_beta_4
OR
woltlabburning_boardMatch2.0_beta_5
OR
woltlabburning_boardMatch2.0_rc1
OR
woltlabburning_boardMatch2.0_rc2
OR
woltlabburning_boardMatch2.1.5
OR
woltlabburning_boardMatch2.1.6
OR
woltlabburning_boardMatch2.2.1
OR
woltlabburning_boardMatch2.2.2
OR
woltlabburning_boardMatch2.2.3
OR
woltlabburning_boardMatch2.3.0
OR
woltlabburning_boardMatch2.3.1
OR
woltlabburning_boardMatch2.3.2
OR
woltlabburning_boardMatch2.3.3
OR
woltlabburning_boardMatch2.3.4
OR
woltlabburning_boardMatch2.3.5
OR
woltlabburning_boardMatch2.3.6
OR
woltlabburning_boardMatch2.4
OR
woltlabburning_boardMatch2.5
OR
woltlabburning_boardMatch2.6
OR
woltlabburning_boardMatch2.7

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.8%

Related for CVE-2007-1518