Browse CVEs

MEDIUM 6.8 CVE-2008-7192 Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3.x versions, allows remote att… Burning Board Mitigation only Fix from $1,6002009-09-09 MEDIUM 5.0 CVE-2008-1717 WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via invalid (1) page and (2) f… Burning Board Mitigation only Fix from $1,6002008-04-09 MEDIUM 6.8 CVE-2008-1323 Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board Lite (wBB) 2 Beta 1 allows remote attackers to delete threads a… Burning Board Lite No fix yet Fix from $1,6002008-03-13 HIGH 7.5 CVE-2008-0857 SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrary SQL commands via the sortOr… Burning Board No fix yet Fix from $1,9502008-02-21 HIGH 7.5 CVE-2007-6518 Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL c… Burning Board Lite No fix yet Fix from $1,9502007-12-24 HIGH 7.5 CVE-2007-1518 SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the ar… Burning Board Mitigation only Fix from $1,9502007-03-20 HIGH 7.5 CVE-2007-0812 SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitra… Burning Board Lite No fix yet Fix from $1,9502007-02-07 HIGH 7.5 CVE-2007-0388 SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote at… Burning Board after 2.3.6 Fix from $1,9502007-01-19 MEDIUM 6.8 CVE-2006-6289 Woltlab Burning Board (wBB) Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an al… Burning Board Lite No fix yet Fix from $1,6002006-12-05 HIGH 7.5 CVE-2006-6237 SQL injection vulnerability in the decode_cookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitr… Burning Board Lite No fix yet Fix from $1,9502006-12-03 HIGH 7.5 CVE-2006-5508 Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via (1)… Burning Book Mitigation only Fix from $1,9502006-10-25 HIGH 7.5 CVE-2006-5509 Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted POST req… Burning Book Mitigation only Fix from $1,9502006-10-25 HIGH 7.5 CVE-2006-5029 SQL injection vulnerability in thread.php in WoltLab Burning Board (wBB) 2.3.x allows remote attackers to obtain the version numbers of PHP, MySQL, a… Burning Board Mitigation only Fix from $1,9502006-09-27 MEDIUM 6.8 CVE-2006-4317 Cross-site scripting (XSS) vulnerability in attachment.php in WoltLab Burning Board (WBB) 2.3.5 allows remote attackers to inject arbitrary web scrip… Burning Board No fix yet Fix from $1,6002006-08-24 HIGH 7.5 CVE-2006-3254 SQL injection vulnerability in newthread.php in Woltlab Burning Board (WBB) 2.0 RC2 allows remote attackers to execute arbitrary SQL commands via the… Burning Board No fix yet Fix from $1,9502006-06-28 HIGH 7.5 CVE-2006-3255 SQL injection vulnerability in showmods.php in Woltlab Burning Board (WBB) 1.2 allows remote attackers to execute arbitrary SQL commands via the boar… Burning Board No fix yet Fix from $1,9502006-06-28 HIGH 7.5 CVE-2006-3256 SQL injection vulnerability in report.php in Woltlab Burning Board (WBB) 2.3.1 allows remote attackers to execute arbitrary SQL commands via the post… Burning Board No fix yet Fix from $1,9502006-06-28 HIGH 7.5 CVE-2006-3218 SQL injection vulnerability in profile.php in Woltlab Burning Board (WBB) 2.1.6 allows remote attackers to execute arbitrary SQL commands via the use… Burning Board Mitigation only Fix from $1,9502006-06-24 HIGH 7.5 CVE-2006-3219 SQL injection vulnerability in thread.php in Woltlab Burning Board (WBB) 2.2.2 allows remote attackers to execute arbitrary SQL commands via the thre… Burning Board Mitigation only Fix from $1,9502006-06-24 HIGH 7.5 CVE-2006-3220 SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary SQL commands … Burning Board Mitigation only Fix from $1,9502006-06-24 HIGH 7.5 CVE-2006-2792 SQL injection vulnerability in misc.php in Woltlab Burning Board (WBB) 2.3.4 allows remote attackers to execute arbitrary SQL commands via the sid pa… Burning Board Mitigation only Fix from $1,9502006-06-03 MEDIUM 6.8 CVE-2006-1324 Cross-site scripting (XSS) vulnerability in acp/lib/class_db_mysql.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitra… Burning Board after 2.3.4 Fix from $1,6002006-03-21 HIGH 7.5 CVE-2005-2673 SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL comm… Burning Board No fix yet Fix from $1,9502005-08-23 HIGH 7.5 CVE-2005-1642 SQL injection vulnerability in the verify_email function in Woltlab Burning Board 2.x and earlier allows remote attackers to execute arbitrary SQL co… Burning Board No fix yet Fix from $1,9502005-05-17 HIGH 7.5 CVE-2005-0661 SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to ex… Burning Board Patch available Fix from $1,9502005-05-02 MEDIUM 6.8 CVE-2005-1285 Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web scr… Burning Board after 2.3.1 Fix from $1,6002005-04-22 HIGH 7.5 CVE-2005-0284 SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute… Burning Book Mitigation only Fix from $1,9502005-01-10 HIGH 7.5 CVE-2002-1505 SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database and poss… Burning Board after 2.0_rc1 Fix from $1,9502003-04-02 HIGH 7.5 CVE-2002-0903 register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php t… Burning Board Patch available Fix from $1,9502002-10-04