Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
burning board vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2008-4627
SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote malicious users to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php.
Rgallery Rgallery Plugin 1.09
1 EDB exploit
7.5
CVSSv2
CVE-2008-5863
SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote malicious users to execute arbitrary SQL commands via the y parameter in a get_user action.
V-gn Userlocator 3.0
1 EDB exploit
4.3
CVSSv2
CVE-2005-0216
Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote malicious users to inject arbitrary web script and HTML via the userid parameter.
4.3
CVSSv2
CVE-2006-1097
Multiple cross-site scripting (XSS) vulnerabilities in Datenbank MOD 2.7 and previous versions for Woltlab Burning Board allow remote malicious users to inject arbitrary web script or HTML via the fileid parameter to (1) info_db.php or (2) database.php.
Datenbank Module Datenbank Module Mod 2.7
7.5
CVSSv2
CVE-2005-3369
Multiple SQL injection vulnerabilities in the Info-DB module (info_db.php) in Woltlab Burning Board 2.7 and previous versions allow remote malicious users to execute arbitrary SQL commands and possibly upload files via the (1) fileid and (2) subkatid parameters.
1 EDB exploit
7.5
CVSSv2
CVE-2009-2311
SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote malicious users to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627.
Selbstzweck Rgallery Plugin 1.2.3
1 EDB exploit
4.3
CVSSv2
CVE-2010-1339
Cross-site scripting (XSS) vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and previous versions for WoltLab Burning Board allows remote malicious users to inject arbitrary web script or HTML via the userid parameter in a modboard action, which is not properly handl...
Robertotto Teamsite Hack Plugin
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
SSRF
buffer overflow
CVE-2023-28952
CVE-2023-41822
CVE-2024-27956
CVE-2023-7028
CVE-2024-34447
CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5