GCVE - cpe:2.3:a:layerbb:layerbb:1.1.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:layerbb:layerbb:1.1.3:*:*:*:*:*:*:*

part: a version: 1.1.3 update: *

Vendor	Layerbb (`6e36a92f-84af-5463-8d22-5a2f064290c2`)
Product	Layerbb (`53ec688e-c5d9-5b56-b432-3569f2cdcec4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/andyrixon/layerbb`	purl2cpe	2026-06-01 10:12:37.451309

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-47954`	vulnerable	2026-06-08 05:38:07.969075	LayerBB 1.1.4 SQL Injection via search_query Parameter HIGH (8.2) LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the search_query parameter. Attackers can send POST requests to /search.php with malicious search_query values using CASE WHEN statements to extract sensitive database information. Published: 2026-05-16T15:26:06.961Z Updated: 2026-05-18T18:48:00.928Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/49593 https://www.vulncheck.com/advisories/layerbb-sql-injection-via-search-query-parameter	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-13974`	vulnerable	2026-06-08 05:12:52.895037	Details available LayerBB 1.1.3 allows conversations.php/cmd/new CSRF. Published: 2019-07-19T06:08:13.000Z Updated: 2024-08-05T00:05:44.147Z Open on db.gcve.eu Reference links http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elayerbb-1-1-3-xss%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-13973`	vulnerable	2026-06-08 05:12:52.894535	Details available LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used. Published: 2019-07-19T06:08:05.000Z Updated: 2024-08-05T00:05:44.088Z Open on db.gcve.eu Reference links http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elayerbb-1-1-3-xss%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-13972`	vulnerable	2026-06-08 05:12:52.894028	Details available LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997. Published: 2019-07-19T06:07:55.000Z Updated: 2024-08-05T00:05:44.076Z Open on db.gcve.eu Reference links http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elayerbb-1-1-3-xss%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17988`	vulnerable	2026-06-08 05:11:07.088561	Details available LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter. Published: 2019-03-07T22:00:00.000Z Updated: 2024-08-05T11:01:14.894Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/45530/ https://github.com/AndyRixon/LayerBB/issues/51	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

LayerBB 1.1.3

Notes

PURL mappings

Vulnerability references

Contribute