Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
woltlab vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2014-8869
Multiple cross-site scripting (XSS) vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin 1.x prior to 1.1.2 for Woltlab Burning Board 4.0 allow remote malicious users to inject arbitrary web script or HTML via the (1) app_android_id or (2)...
Tapatalk Tapatalk 1.0.1
Tapatalk Tapatalk 1.0.0
Tapatalk Tapatalk 1.1.1
Tapatalk Tapatalk 1.1.0
Tapatalk Tapatalk 1.0.2
755
VMScore
CVE-2008-1640
SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and previous versions addon for Woltlab Burning Board (wBB) allows remote malicious users to execute arbitrary SQL commands via the view_id parameter in an ansicht action.
Jgs-xa Jgs Treffen
Jgs-xa Jgs Treffen 2.0.1
1 EDB exploit
755
VMScore
CVE-2010-1338
SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and previous versions for WoltLab Burning Board allows remote malicious users to execute arbitrary SQL commands via the userid parameter in a modboard action.
Robertotto Teamsite Hack Plugin
1 EDB exploit
755
VMScore
CVE-2005-3369
Multiple SQL injection vulnerabilities in the Info-DB module (info_db.php) in Woltlab Burning Board 2.7 and previous versions allow remote malicious users to execute arbitrary SQL commands and possibly upload files via the (1) fileid and (2) subkatid parameters.
1 EDB exploit
435
VMScore
CVE-2015-2275
Cross-site scripting (XSS) vulnerability in WoltLab Community Gallery 2.0 prior to 2014-12-26 allows remote malicious users to inject arbitrary web script or HTML via the parameters[data][7][title] parameter in a saveImageData action to index.php/AJAXProxy.
Wotlab Community Gallery 2.0
1 EDB exploit
755
VMScore
CVE-2008-4627
SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote malicious users to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php.
Rgallery Rgallery Plugin 1.09
1 EDB exploit
755
VMScore
CVE-2008-5863
SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote malicious users to execute arbitrary SQL commands via the y parameter in a get_user action.
V-gn Userlocator 3.0
1 EDB exploit
383
VMScore
CVE-2005-0216
Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote malicious users to inject arbitrary web script and HTML via the userid parameter.
383
VMScore
CVE-2006-1097
Multiple cross-site scripting (XSS) vulnerabilities in Datenbank MOD 2.7 and previous versions for Woltlab Burning Board allow remote malicious users to inject arbitrary web script or HTML via the fileid parameter to (1) info_db.php or (2) database.php.
Datenbank Module Datenbank Module Mod 2.7
755
VMScore
CVE-2009-2311
SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote malicious users to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627.
Selbstzweck Rgallery Plugin 1.2.3
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
validation
CVE-2012-1823
malicious code
CVE-2024-5770
CVE-2023-45866
CVE-2024-35687
local users
CVE-2024-31246
CVE-2024-35730
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »