GCVE - cpe:2.3:a:woltlab:burning_board:2.3.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:woltlab:burning_board:2.3.4:*:*:*:*:*:*:*

part: a version: 2.3.4 update: *

Vendor	Woltlab (`5736b72c-8a73-577e-86c5-6f79c04cb330`)
Product	Burning Board (`f93e263b-76b5-5f6e-a121-aff968c9f16f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-1518`	vulnerable	2026-06-08 04:49:42.789910	Details available SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array. Published: 2007-03-20T20:00:00.000Z Updated: 2024-08-07T12:59:08.521Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/2455 http://www.securityfocus.com/archive/1/463002/100/0/threaded http://www.securityfocus.com/archive/1/462860/100/0/threaded http://www.securityfocus.com/bid/22970	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5029`	vulnerable	2026-06-08 04:49:19.521839	Details available SQL injection vulnerability in thread.php in WoltLab Burning Board (wBB) 2.3.x allows remote attackers to obtain the version numbers of PHP, MySQL, and wBB via the page parameter. NOTE: this issue might be a forced SQL error. Also, the original report was disputed by a third party for 2.3.3 and 2.3.4. Published: 2006-09-27T23:00:00.000Z Updated: 2024-08-07T19:32:22.903Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/447069/100/100/threaded http://www.securityfocus.com/archive/1/446937/100/0/threaded http://www.securityfocus.com/archive/1/446743/100/0/threaded http://www.securityfocus.com/archive/1/446938/100/100/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2792`	vulnerable	2026-06-08 04:49:07.575663	Details available SQL injection vulnerability in misc.php in Woltlab Burning Board (WBB) 2.3.4 allows remote attackers to execute arbitrary SQL commands via the sid parameter. Published: 2006-06-03T01:00:00.000Z Updated: 2024-08-07T18:06:25.803Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2006-05/0760.html https://exchange.xforce.ibmcloud.com/vulnerabilities/26754 http://www.securityfocus.com/archive/1/435368/100/0/threaded http://securityreason.com/securityalert/1022	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2569`	vulnerable	2026-06-08 04:49:07.085685	Details available SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows remote attackers to execute arbitrary SQL commands via the cat parameter. Published: 2006-05-24T23:00:00.000Z Updated: 2024-08-07T17:58:51.127Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/18077 http://secunia.com/advisories/20167 https://exchange.xforce.ibmcloud.com/vulnerabilities/26592 https://www.exploit-db.com/exploits/1810 http://www.vupen.com/english/advisories/2006/1925	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1215`	vulnerable	2026-06-08 04:48:56.532909	Details available Cross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the percent parameter. NOTE: this issue has been disputed in a followup post, although the original disclosure might be related to reflected XSS. Published: 2006-03-14T02:00:00.000Z Updated: 2024-08-07T17:03:28.574Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/25156 http://www.securityfocus.com/archive/1/426766 http://www.securityfocus.com/archive/1/426816/30/0/threaded http://www.securityfocus.com/bid/16959	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.