Woltlab

Records39All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high24CVSS 7.0–8.9

Exploited now

Woltlab records in CISA KEV

No Woltlab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Burning Board 31 records LOW Burning Board Lite 6 records LOW Burning Book 3 records LOW

Records

3 records in Burning Book · all components

TI-2006-05320 CVE-2006-5509 · GHSA-q7g7-9g33-6v6c

Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote…

LOW 35

Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted POST requests that store PHP code in a database that is later processed by eval…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01253 Published 2006-10-25 No fix listed

TI-2006-05319 CVE-2006-5508 · GHSA-pffq-vgcv-vx5f

Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2…

LOW 35

Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via (1) the n parameter and (2) the User-Agent HTTP header.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01102 Published 2006-10-25 No fix listed

TI-2005-00249 CVE-2005-0284 · GHSA-wx2j-r584-v9qv

SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and…

LOW 35

SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the user-agent parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01111 Published 2005-02-10 No fix listed

Open these records in search →

Critical	0
High	24
Medium	14
Low	1
No CVSS	0