GCVE - cpe:2.3:a:layerbb:layerbb:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:layerbb:layerbb:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/andyrixon/layerbb`	purl2cpe	2026-06-01 10:12:37.451301

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-47954`	vulnerable	2026-06-08 05:38:07.966947	LayerBB 1.1.4 SQL Injection via search_query Parameter HIGH (8.2) LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the search_query parameter. Attackers can send POST requests to /search.php with malicious search_query values using CASE WHEN statements to extract sensitive database information. Published: 2026-05-16T15:26:06.961Z Updated: 2026-05-18T18:48:00.928Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/49593 https://www.vulncheck.com/advisories/layerbb-sql-injection-via-search-query-parameter	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-16531`	vulnerable	2026-06-08 05:13:08.532159	Details available LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php. Published: 2019-09-20T00:47:00.000Z Updated: 2024-08-05T01:17:39.622Z Open on db.gcve.eu Reference links https://github.com/AndyRixon/LayerBB/pull/40 https://github.com/0xB9/LayerBB-1.1.3-CSRF/blob/master/README.md https://github.com/AndyRixon/LayerBB/compare/1.1.3...1.1.4 http://packetstormsecurity.com/files/154549/LayerBB-1.1.3-Cross-Site-Request-Forgery.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.