CVEvulnerability
CVE-2007-6518
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-12-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the (1) showposts, (2) sortby, and (3) sortorder parameters.
Affected configurations
• woltlab burning board lite 1.0.2
• woltlab burning board lite 1.0.2 pl3e
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/28188 Vendor Advisory
- http://www.osvdb.org/39497 www.osvdb.org
- http://www.securityfocus.com/archive/1/485408/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26973 Exploit
- http://www.vupen.com/english/advisories/2007/4300 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39174 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/28188 Vendor Advisory
- http://www.osvdb.org/39497 www.osvdb.org
- http://www.securityfocus.com/archive/1/485408/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26973 Exploit
- http://www.vupen.com/english/advisories/2007/4300 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39174 exchange.xforce.ibmcloud.com