Burning Board Lite@1.0.2 Security Vulnerabilities and Issues — Burning Board Lite@1.0.2 CVE List

Lucene search

WoltlabBurning Board Lite1.0.2

4 matches found

CVE•added 2007/12/24 8:46 p.m.•77 views

CVE-2007-6518

Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the (1) showposts, (2) sortby, and (3) sortorder parameters.

7.5CVSS8.5AI score0.00591EPSS

CVE•added 2006/12/05 11:28 a.m.•43 views

CVE-2006-6289

Woltlab Burning Board (wBB) Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the wbb_userid parameter to the top-level URI. ...

6.8CVSS8AI score0.04587EPSS

CVE•added 2007/02/07 11:28 a.m.•39 views

CVE-2007-0812

SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitrary SQL commands via the pmid[0] parameter.

7.5CVSS7.9AI score0.00771EPSS

CVE•added 2006/12/03 7:28 p.m.•37 views

CVE-2006-6237

SQL injection vulnerability in the decode_cookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threadvisit Cookie parameter.

7.5CVSS8.4AI score0.01186EPSS