GCVE - cpe:2.3:a:woltlab:burning_board:2.2.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:woltlab:burning_board:2.2.1:*:*:*:*:*:*:*

part: a version: 2.2.1 update: *

Vendor	Woltlab (`5736b72c-8a73-577e-86c5-6f79c04cb330`)
Product	Burning Board (`f93e263b-76b5-5f6e-a121-aff968c9f16f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-1518`	vulnerable	2026-06-08 04:49:42.786264	Details available SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array. Published: 2007-03-20T20:00:00.000Z Updated: 2024-08-07T12:59:08.521Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/2455 http://www.securityfocus.com/archive/1/463002/100/0/threaded http://www.securityfocus.com/archive/1/462860/100/0/threaded http://www.securityfocus.com/bid/22970	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3220`	vulnerable	2026-06-08 04:49:08.568933	Details available SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary SQL commands via the sid parameter. Published: 2006-06-24T10:00:00.000Z Updated: 2024-08-07T18:23:20.794Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/27141 http://securityreason.com/securityalert/1142 http://www.securityfocus.com/archive/1/437115/100/100/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0927`	vulnerable	2026-06-08 04:48:55.812286	Details available Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board (wBB) 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) userid parameter in (a) jgs_galerie_slideshow.php and (b) jgs_galerie_scroll.php, and the (2) katid parameter in (c) jgs_galerie_slideshow.php. Published: 2006-02-28T11:00:00.000Z Updated: 2024-08-07T16:56:14.032Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/16810 http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0615.html http://www.nukedx.com/?viewdoc=11 http://www.securityfocus.com/archive/1/425981/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/24888	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0661`	vulnerable	2026-06-08 04:48:13.261654	Details available SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) lastvisit cookie. Published: 2005-03-07T05:00:00.000Z Updated: 2024-08-07T21:21:06.620Z Open on db.gcve.eu Reference links http://secunia.com/advisories/14450 http://securitytracker.com/id?1013351	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.