GCVE - cpe:2.3:a:woltlab:burning_board:2.0_rc2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:woltlab:burning_board:2.0_rc2:*:*:*:*:*:*:*

part: a version: 2.0_rc2 update: *

Vendor	Woltlab (`5736b72c-8a73-577e-86c5-6f79c04cb330`)
Product	Burning Board (`f93e263b-76b5-5f6e-a121-aff968c9f16f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-1518`	vulnerable	2026-06-08 04:49:42.784570	Details available SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array. Published: 2007-03-20T20:00:00.000Z Updated: 2024-08-07T12:59:08.521Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/2455 http://www.securityfocus.com/archive/1/463002/100/0/threaded http://www.securityfocus.com/archive/1/462860/100/0/threaded http://www.securityfocus.com/bid/22970	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3254`	vulnerable	2026-06-08 04:49:08.721663	Details available SQL injection vulnerability in newthread.php in Woltlab Burning Board (WBB) 2.0 RC2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter. Published: 2006-06-27T19:00:00.000Z Updated: 2024-08-07T18:23:21.089Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/1154 http://www.securityfocus.com/bid/18597 http://www.securityfocus.com/archive/1/438252 https://exchange.xforce.ibmcloud.com/vulnerabilities/27350 http://securitytracker.com/id?1016374	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2569`	vulnerable	2026-06-08 04:49:07.083677	Details available SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows remote attackers to execute arbitrary SQL commands via the cat parameter. Published: 2006-05-24T23:00:00.000Z Updated: 2024-08-07T17:58:51.127Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/18077 http://secunia.com/advisories/20167 https://exchange.xforce.ibmcloud.com/vulnerabilities/26592 https://www.exploit-db.com/exploits/1810 http://www.vupen.com/english/advisories/2006/1925	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1094`	vulnerable	2026-06-08 04:48:56.226553	Details available SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to (1) info_db.php or (2) database.php. Published: 2006-03-09T11:00:00.000Z Updated: 2024-08-07T16:56:15.537Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/426583 http://www.osvdb.org/23810 http://www.securityfocus.com/bid/16914 http://www.osvdb.org/23808 http://www.nukedx.com/?viewdoc=17	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1034`	vulnerable	2026-06-08 04:48:56.050065	Details available Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to galerie_index.php and possibly (2) galerie_onfly.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. The second vector might not be XSS. Published: 2006-03-07T11:00:00.000Z Updated: 2024-09-16T17:53:17.557Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/16843	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.