CVE-2007-1518 SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array.
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| woltlab burning board | = 2.0 | No fix listed |
| woltlab burning board | = 2.0.3 | No fix listed |
| woltlab burning board | = 2.0_beta_3 | No fix listed |
| woltlab burning board | = 2.0_beta_4 | No fix listed |
| woltlab burning board | = 2.0_beta_5 | No fix listed |
| woltlab burning board | = 2.0_rc1 | No fix listed |
| woltlab burning board | = 2.0_rc2 | No fix listed |
| woltlab burning board | = 2.1.5 | No fix listed |
| woltlab burning board | = 2.1.6 | No fix listed |
| woltlab burning board | = 2.2.1 | No fix listed |
| woltlab burning board | = 2.2.2 | No fix listed |
| woltlab burning board | = 2.2.3 | No fix listed |
| woltlab burning board | = 2.3.0 | No fix listed |
| woltlab burning board | = 2.3.1 | No fix listed |
| woltlab burning board | = 2.3.2 | No fix listed |
| woltlab burning board | = 2.3.3 | No fix listed |
| woltlab burning board | = 2.3.4 | No fix listed |
| woltlab burning board | = 2.3.5 | No fix listed |
| woltlab burning board | = 2.3.6 | No fix listed |
| woltlab burning board | = 2.4 | No fix listed |
| woltlab burning board | = 2.5 | No fix listed |
| woltlab burning board | = 2.6 | No fix listed |
| woltlab burning board | = 2.7 | No fix listed |
References
- 2455 third-party-advisory
- 20070314 Woltab Burning Board SQL Injection usergroups.php mailing-list
- 20070315 Re: [Full-disclosure] Woltab Burning Board SQL Injection usergroups.php mailing-list
- 22970 vdb-entry