Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

woltlab / burning_board_lite CVEs

Beta · best-effort

7 CVEs tagged to woltlab / burning_board_lite — 0 Critical, 3 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to woltlab vendor archive

CVE-2008-1323

Published Mar 13, 2008

Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board Lite (wBB) 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDe…

CVSS 6.8 · Medium
Vendor/product tagsBeta · best-effort

CVE-2007-6518

Published Dec 24, 2007

Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the (1) showposts,…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2007-0812

Published Feb 7, 2007

SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitrary SQL commands via the pmid[0…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2006-6289

Published Dec 5, 2006

Woltlab Burning Board (wBB) Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash va…

CVSS 6.8 · Medium
Vendor/product tagsBeta · best-effort

CVE-2006-6237

Published Dec 3, 2006

SQL injection vulnerability in the decode_cookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threa…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2005-0216

Published May 2, 2005

Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-7 of 7 CVEsPage 1 of 1