CVE-2007-1518

SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array.

Published: Mar 20, 2007
Updated: Apr 13, 2023
CVE: CVE-2007-1518
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
woltlab / burning_board	2.4	2.4.x
woltlab / burning_board	2.3.2	2.3.2.x
woltlab / burning_board	2.2.1	2.2.1.x
woltlab / burning_board	2.1.5	2.1.5.x
woltlab / burning_board	2.7	2.7.x
woltlab / burning_board	2.2.3	2.2.3.x
woltlab / burning_board	2.0_beta_4	2.0_beta_4.x
woltlab / burning_board	2.2.2	2.2.2.x
woltlab / burning_board	2.0	2.0.x
woltlab / burning_board	2.3.4	2.3.4.x
woltlab / burning_board	2.3.0	2.3.0.x
woltlab / burning_board	2.3.6	2.3.6.x
woltlab / burning_board	2.3.3	2.3.3.x
woltlab / burning_board	2.3.1	2.3.1.x
woltlab / burning_board	2.0.3	2.0.3.x
woltlab / burning_board	2.0_beta_3	2.0_beta_3.x
woltlab / burning_board	2.5	2.5.x
woltlab / burning_board	2.3.5	2.3.5.x
woltlab / burning_board	2.6	2.6.x
woltlab / burning_board	2.0_rc1	2.0_rc1.x
woltlab / burning_board	2.0_beta_5	2.0_beta_5.x
woltlab / burning_board	2.1.6	2.1.6.x
woltlab / burning_board	2.0_rc2	2.0_rc2.x

Vulnerability Database

289,784

CVE-2007-1518