Burning Board Security Vulnerabilities and Issues — Burning Board CVE List

Lucene search

WoltlabBurning Board

3 matches found

CVE•added 2007/01/19 11:28 p.m.•58 views

CVE-2007-0388

SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids[1] and other boardids[] parameters.

7.5CVSS8.3AI score0.00342EPSS

CVE•added 2007/03/14 12:19 a.m.•40 views

CVE-2007-1443

Multiple cross-site scripting (XSS) vulnerabilities in register.php in Woltlab Burning Board (wBB) 2.3.6 and Burning Board Lite 1.0.2pl3e allow remote attackers to inject arbitrary web script or HTML via the (1) r_username, (2) r_email, (3) r_password, (4) r_confirmpassword, (5) r_homepage, (6) r_i...

4.3CVSS5.8AI score0.00581EPSS

CVE•added 2007/03/20 8:19 p.m.•33 views

CVE-2007-1518

SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array.

7.5CVSS8.4AI score0.00297EPSS