Burning Board
Approved changes feed: RSS · Atom
cpe:2.3:a:woltlab:burning_board:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Woltlab (5736b72c-8a73-577e-86c5-6f79c04cb330) |
|---|---|
| Product | Burning Board (f93e263b-76b5-5f6e-a121-aff968c9f16f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-1339 |
not_vulnerable | 2026-06-08 04:54:07.299939 |
Details available
Cross-site scripting (XSS) vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to inject arbitrary web script or HTML via the userid parameter in a modboard action, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2010-04-09T18:00:00.000Z
Updated: 2024-09-17T01:06:39.856Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1338 |
not_vulnerable | 2026-06-08 04:54:07.299523 |
Details available
SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute arbitrary SQL commands via the userid parameter in a modboard action.
Published: 2010-04-09T18:00:00.000Z
Updated: 2024-08-07T01:21:18.614Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2311 |
not_vulnerable | 2026-06-08 04:51:27.745363 |
Details available
SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627.
Published: 2009-07-02T10:00:00.000Z
Updated: 2024-08-07T05:44:55.950Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5863 |
not_vulnerable | 2026-06-08 04:50:53.415616 |
Details available
SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote attackers to execute arbitrary SQL commands via the y parameter in a get_user action.
Published: 2009-01-06T17:00:00.000Z
Updated: 2024-08-07T11:13:12.904Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0388 |
vulnerable | 2026-06-08 04:49:32.014992 |
Details available
SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids[1] and other boardids[] parameters.
Published: 2007-01-19T23:00:00.000Z
Updated: 2024-08-07T12:19:30.293Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1324 |
vulnerable | 2026-06-08 04:48:56.919973 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1327 |
vulnerable | 2026-06-08 04:48:26.388378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1285 |
vulnerable | 2026-06-08 04:48:26.274349 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1505 |
vulnerable | 2026-06-08 04:46:23.888932 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.