Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
burning board vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-4627
SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote malicious users to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php.
Rgallery Rgallery Plugin 1.09
1 EDB exploit
NA
CVE-2008-5863
SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote malicious users to execute arbitrary SQL commands via the y parameter in a get_user action.
V-gn Userlocator 3.0
1 EDB exploit
NA
CVE-2005-0216
Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote malicious users to inject arbitrary web script and HTML via the userid parameter.
NA
CVE-2006-1097
Multiple cross-site scripting (XSS) vulnerabilities in Datenbank MOD 2.7 and previous versions for Woltlab Burning Board allow remote malicious users to inject arbitrary web script or HTML via the fileid parameter to (1) info_db.php or (2) database.php.
Datenbank Module Datenbank Module Mod 2.7
NA
CVE-2005-3369
Multiple SQL injection vulnerabilities in the Info-DB module (info_db.php) in Woltlab Burning Board 2.7 and previous versions allow remote malicious users to execute arbitrary SQL commands and possibly upload files via the (1) fileid and (2) subkatid parameters.
1 EDB exploit
NA
CVE-2009-2311
SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote malicious users to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627.
Selbstzweck Rgallery Plugin 1.2.3
1 EDB exploit
NA
CVE-2010-1339
Cross-site scripting (XSS) vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and previous versions for WoltLab Burning Board allows remote malicious users to inject arbitrary web script or HTML via the userid parameter in a modboard action, which is not properly handl...
Robertotto Teamsite Hack Plugin
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
CVE-2006-4304
CVE-2023-26603
CVE-2024-28327
CVE-2023-50363
CVE-2024-21905
template injection
CVE-2024-3400
cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5