Woltlab: >> Burning Board Lite >> 1.0.0 Security Vulnerabilities
SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitrary SQL commands via the pmid[0] parameter.
CVSS Score
7.5
EPSS Score
0.008
Published
2007-02-07
Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter.
CVSS Score
4.3
EPSS Score
0.004
Published
2005-05-02