Show filters
10 Total Results
Displaying 1-10 of 10
Sort by:
Attacker Value
Unknown
CVE-2008-1323
Disclosure Date: March 13, 2008 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board Lite (wBB) 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action.
0
Attacker Value
Unknown
CVE-2007-1518
Disclosure Date: March 20, 2007 (last updated October 04, 2023)
SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array.
0
Attacker Value
Unknown
CVE-2006-3254
Disclosure Date: June 28, 2006 (last updated October 04, 2023)
SQL injection vulnerability in newthread.php in Woltlab Burning Board (WBB) 2.0 RC2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter.
0
Attacker Value
Unknown
CVE-2006-2569
Disclosure Date: May 24, 2006 (last updated October 04, 2023)
SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows remote attackers to execute arbitrary SQL commands via the cat parameter.
0
Attacker Value
Unknown
CVE-2006-1094
Disclosure Date: March 09, 2006 (last updated February 22, 2025)
SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to (1) info_db.php or (2) database.php.
0
Attacker Value
Unknown
CVE-2006-1034
Disclosure Date: March 07, 2006 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to galerie_index.php and possibly (2) galerie_onfly.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. The second vector might not be XSS.
0
Attacker Value
Unknown
CVE-2006-0927
Disclosure Date: February 28, 2006 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board (wBB) 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) userid parameter in (a) jgs_galerie_slideshow.php and (b) jgs_galerie_scroll.php, and the (2) katid parameter in (c) jgs_galerie_slideshow.php.
0
Attacker Value
Unknown
CVE-2005-1642
Disclosure Date: May 17, 2005 (last updated February 22, 2025)
SQL injection vulnerability in the verify_email function in Woltlab Burning Board 2.x and earlier allows remote attackers to execute arbitrary SQL commands via the $email variable.
0
Attacker Value
Unknown
CVE-2005-0661
Disclosure Date: May 02, 2005 (last updated February 22, 2025)
SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) lastvisit cookie.
0
Attacker Value
Unknown
CVE-2002-1505
Disclosure Date: April 02, 2003 (last updated February 22, 2025)
SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter.
0
