7.5

CVE-2007-1518

SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Woltlab ≫ Burning Board Version 2.0
Woltlab ≫ Burning Board Version 2.0.3
Woltlab ≫ Burning Board Version 2.0_beta_3
Woltlab ≫ Burning Board Version 2.0_beta_4
Woltlab ≫ Burning Board Version 2.0_beta_5
Woltlab ≫ Burning Board Version 2.0_rc1
Woltlab ≫ Burning Board Version 2.0_rc2
Woltlab ≫ Burning Board Version 2.1.5
Woltlab ≫ Burning Board Version 2.1.6
Woltlab ≫ Burning Board Version 2.2.1
Woltlab ≫ Burning Board Version 2.2.2
Woltlab ≫ Burning Board Version 2.2.3
Woltlab ≫ Burning Board Version 2.3.0
Woltlab ≫ Burning Board Version 2.3.1
Woltlab ≫ Burning Board Version 2.3.2
Woltlab ≫ Burning Board Version 2.3.3
Woltlab ≫ Burning Board Version 2.3.4
Woltlab ≫ Burning Board Version 2.3.5
Woltlab ≫ Burning Board Version 2.3.6
Woltlab ≫ Burning Board Version 2.4
Woltlab ≫ Burning Board Version 2.5
Woltlab ≫ Burning Board Version 2.6
Woltlab ≫ Burning Board Version 2.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.98% 0.577
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://securityreason.com/securityalert/2455
http://www.securityfocus.com/archive/1/462860/100/0/threaded
http://www.securityfocus.com/archive/1/463002/100/0/threaded
http://www.securityfocus.com/bid/22970