GCVE - cpe:2.3:a:woltlab:burning_board_lite:1.0.2

Approved changes feed: RSS · Atom

cpe:2.3:a:woltlab:burning_board_lite:1.0.2_pl3e:*:*:*:*:*:*:*

part: a version: 1.0.2_pl3e update: *

Vendor	Woltlab (`5736b72c-8a73-577e-86c5-6f79c04cb330`)
Product	Burning Board Lite (`195e7f2a-e709-5ad6-8f57-253dea3871e2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/woltlab/wcf`	purl2cpe	2026-06-01 10:12:43.718768

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-6518`	vulnerable	2026-06-08 04:50:08.979395	Details available Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the (1) showposts, (2) sortby, and (3) sortorder parameters. Published: 2007-12-24T20:00:00.000Z Updated: 2024-08-07T16:11:05.709Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/39174 http://www.securityfocus.com/archive/1/485408/100/0/threaded http://www.vupen.com/english/advisories/2007/4300 http://secunia.com/advisories/28188 http://www.securityfocus.com/bid/26973	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1443`	vulnerable	2026-06-08 04:49:42.508718	Details available Multiple cross-site scripting (XSS) vulnerabilities in register.php in Woltlab Burning Board (wBB) 2.3.6 and Burning Board Lite 1.0.2pl3e allow remote attackers to inject arbitrary web script or HTML via the (1) r_username, (2) r_email, (3) r_password, (4) r_confirmpassword, (5) r_homepage, (6) r_icq, (7) r_aim, (8) r_yim, (9) r_msn, (10) r_year, (11) r_month, (12) r_day, (13) r_gender, (14) r_signature, (15) r_usertext, (16) r_invisible, (17) r_usecookies, (18) r_admincanemail, (19) r_emailnotify, (20) r_notificationperpm, (21) r_receivepm, (22) r_emailonpm, (23) r_pmpopup, (24) r_showsignatures, (25) r_showavatars, (26) r_showimages, (27) r_daysprune, (28) r_umaxposts, (29) r_dateformat, (30) r_timeformat, (31) r_startweek, (32) r_timezoneoffset, (33) r_usewysiwyg, (34) r_styleid, (35) r_langid, (36) key_string, (37) key_number, (38) disablesmilies, (39) disablebbcode, (40) disableimages, (41) field[1], (42) field[2], and (43) field[3] parameters. NOTE: a third-party researcher has disputed some of these vectors, stating that only the r_dateformat and r_timeformat parameters in Burning Board 2.3.6 are affected. Published: 2007-03-14T00:00:00.000Z Updated: 2024-08-07T12:59:08.496Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/2424 http://secunia.com/advisories/24404 http://www.vupen.com/english/advisories/2007/0856 http://www.securityfocus.com/archive/1/461744/100/100/threaded http://www.securityfocus.com/archive/1/461737/100/100/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0812`	vulnerable	2026-06-08 04:49:33.434560	Details available SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitrary SQL commands via the pmid[0] parameter. Published: 2007-02-07T11:00:00.000Z Updated: 2024-08-07T12:34:21.124Z Open on db.gcve.eu Reference links http://secunia.com/advisories/24027 https://exchange.xforce.ibmcloud.com/vulnerabilities/32172 http://www.securityfocus.com/bid/22415 http://www.vupen.com/english/advisories/2007/0491 https://www.exploit-db.com/exploits/3262	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Burning Board Lite

PURL mappings

Vulnerability references

Contribute