Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
woltlab burning board 2.3.6 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2007-1443
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Woltlab Burning Board (wBB) 2.3.6 and Burning Board Lite 1.0.2pl3e allow remote malicious users to inject arbitrary web script or HTML via the (1) r_username, (2) r_email, (3) r_password, (4) r_confirmpassword...
Woltlab Burning Board 2.3.6
Woltlab Burning Board Lite 1.0.2 Pl3e
NA
CVE-2007-1518
SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote malicious users to execute arbitrary SQL commands via the array index of the applicationids array.
Woltlab Burning Board 2.0
Woltlab Burning Board 2.0.3
Woltlab Burning Board 2.1.6
Woltlab Burning Board 2.2.1
Woltlab Burning Board 2.3.5
Woltlab Burning Board 2.3.6
Woltlab Burning Board 2.0 Beta 5
Woltlab Burning Board 2.0 Rc1
Woltlab Burning Board 2.3.0
Woltlab Burning Board 2.3.1
Woltlab Burning Board 2.6
Woltlab Burning Board 2.7
Woltlab Burning Board 2.0 Beta 3
Woltlab Burning Board 2.0 Beta 4
Woltlab Burning Board 2.2.2
Woltlab Burning Board 2.2.3
Woltlab Burning Board 2.4
Woltlab Burning Board 2.5
Woltlab Burning Board 2.0 Rc2
Woltlab Burning Board 2.1.5
Woltlab Burning Board 2.3.2
Woltlab Burning Board 2.3.3
1 EDB exploit
NA
CVE-2007-0388
SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and previous versions, and 2.3.6 and previous versions in the 2.x series, allows remote malicious users to execute arbitrary SQL commands via the boardids[1] and other boardids[] parameters.
Woltlab Burning Board
3 EDB exploits
NA
CVE-2008-0472
Cross-site request forgery (CSRF) vulnerability in modcp.php in Woltlab Burning Board (wBB) 2.3.6 PL2 allows remote malicious users to delete threads as moderators or administrators via a thread_del action.
Woltlab Burning Board 2.3.6 Pl2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
CVE-2006-4304
CVE-2023-26603
CVE-2024-28327
CVE-2023-50363
CVE-2024-21905
template injection
CVE-2024-3400
cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started