Approved changes feed: RSS · Atom

cpe:2.3:a:pybb_project:pybb:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPybb Project (bb5152fd-9546-54a1-b8ca-7ef234f858c6)
ProductPybb (7a21b2c3-77e8-50fc-8e15-758610b6edf0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-34249 vulnerable 2026-06-08 06:06:24.941501 benjjvi/PyBB may send unsanitized request to SQL database
CRITICAL (9.8)
benjjvi/PyBB is an open source bulletin board. Prior to commit dcaeccd37198ecd3e41ea766d1099354b60d69c2, benjjvi/PyBB is vulnerable to SQL Injection. This vulnerability has been fixed as of commit dcaeccd37198ecd3e41ea766d1099354b60d69c2. As a workaround, a user may be able to update the software manually to avoid this problem by sanitizing user queries to `BulletinDatabaseModule.py`.
Published: 2023-06-13T16:40:44.556Z
Updated: 2025-01-03T18:05:40.878Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.