CVE-2007-1518

SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array.

Link	Resource
http://www.securityfocus.com/bid/22970
http://securityreason.com/securityalert/2455
http://www.securityfocus.com/archive/1/463002/100/0/threaded
http://www.securityfocus.com/archive/1/462860/100/0/threaded

Configuration 1

cpe:2.3:a:woltlab:burning_board:2.4:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.3.2:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.2.1:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.1.5:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.7:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.2.3:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.0_beta_4:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.2.2:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.0:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.3.4:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.3.0:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.3.6:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.3.3:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.3.1:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.0.3:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.0_beta_3:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.5:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.3.5:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.6:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.0_rc1:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.0_beta_5:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.1.6:*:*:*:*:*:*:* cpe:2.3:a:woltlab:burning_board:2.0_rc2:*:*:*:*:*:*:*

---

Published : 2007-03-20 08:19

Updated : 2018-10-16 04:38

---

NVD link : CVE-2007-1518

Mitre link : CVE-2007-1518

Burning Board

Woltlab

NVD-CWE-Other