Known Vulnerabilities for products from Woltlab
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Woltlab".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2010-1339 json | Cross-site scripting (XSS) vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Boar... | Not Provided | 2010-04-09 | 2026-04-29 |
| CVE-2010-1338 json | SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remo... | Not Provided | 2010-04-09 | 2026-04-29 |
| CVE-2009-2311 json | SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to execute ... | Not Provided | 2009-07-02 | 2026-04-23 |
| CVE-2008-7192 json | Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3.x ver... | Not Provided | 2009-09-09 | 2026-04-23 |
| CVE-2008-5863 json | SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote attack... | Not Provided | 2009-01-06 | 2026-04-23 |
| CVE-2008-4627 json | SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execute ar... | Not Provided | 2008-10-21 | 2026-04-23 |
| CVE-2008-1717 json | WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via in... | Not Provided | 2008-04-09 | 2026-04-23 |
| CVE-2008-1716 json | Cross-site scripting (XSS) vulnerability in WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows rem... | Not Provided | 2008-04-09 | 2026-04-23 |
| CVE-2008-1323 json | Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board Lite (wBB) 2 Beta 1 allows remote attac... | Not Provided | 2008-03-13 | 2026-04-23 |
| CVE-2008-0857 json | SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrary SQL... | Not Provided | 2008-02-21 | 2026-04-23 |
| CVE-2008-0472 json | Cross-site request forgery (CSRF) vulnerability in modcp.php in Woltlab Burning Board (wBB) 2.3.6 PL2 allows remote attackers... | Not Provided | 2008-01-29 | 2026-04-23 |
| CVE-2007-6518 json | Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to... | Not Provided | 2007-12-24 | 2026-04-23 |
| CVE-2007-1518 json | SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary... | Not Provided | 2007-03-20 | 2026-04-23 |
| CVE-2007-1443 json | Multiple cross-site scripting (XSS) vulnerabilities in register.php in Woltlab Burning Board (wBB) 2.3.6 and Burning Board Li... | Not Provided | 2007-03-14 | 2026-04-23 |
| CVE-2007-0812 json | SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authenticated ... | Not Provided | 2007-02-07 | 2026-04-23 |
| CVE-2007-0388 json | SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x ... | Not Provided | 2007-01-19 | 2026-04-23 |
| CVE-2006-6289 json | Woltlab Burning Board (wBB) Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter wit... | Not Provided | 2006-12-05 | 2026-04-23 |
| CVE-2006-6237 json | SQL injection vulnerability in the decode_cookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote att... | Not Provided | 2006-12-03 | 2026-04-23 |
| CVE-2006-5509 json | Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP c... | Not Provided | 2006-10-25 | 2026-04-23 |
| CVE-2006-5508 json | Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitr... | Not Provided | 2006-10-25 | 2026-04-23 |