CVE-2011-3385

Cross-site scripting XSS vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unknown vectors, a different vulnerability than CVE-2006-2307...

Sql injection

WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php...

CVE-2017-7410

Multiple SQL injection vulnerabilities in account/signup.php and account/signup2.php in WebsiteBaker 2.10.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 username, 2 displayname parameter...

WebsiteBaker 2.8.1 Cross Site Request Forgery

Exploit Title: WebsiteBaker 2.8.1 CSRF Date: 05/18/10 Author: Luis Santana Software Link: http://www.websitebaker2.org/modules/downloadgallery/dlc.php?file=88&id=1269641667 Version: 2.8.1 Tested on: All CVE : N/A Code : http://hacktalk.net/exploits/websitebakercsrfPOC.zip The full advisory can be...