SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitrary SQL commands via the pmid[0] parameter.
| Software | From | Fixed in |
|---|---|---|
| woltlab / burning_board_lite | 1.0.2 | 1.0.2.x |
| woltlab / burning_board_lite | 1.0.2_pl3e | 1.0.2_pl3e.x |
| woltlab / burning_board_lite | 1.0.1e | 1.0.1e.x |
| woltlab / burning_board_lite | 1.0.0 | 1.0.0.x |