CVE-2007-0388

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.04%

Published

Jan 19, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (4)

All weaponized →

Exploit-DBWoltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (1)Exploit-DBWoltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (2)Exploit-DBWoltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (3)TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids[1] and other boardids[] parameters.

Affected Products (2)

woltlab · burning_boardvulnerable

References (8)

http://osvdb.org/33872

https://exchange.xforce.ibmcloud.com/vulnerabilities/31550

https://www.exploit-db.com/exploits/3143

https://www.exploit-db.com/exploits/3144

http://osvdb.org/33872

https://exchange.xforce.ibmcloud.com/vulnerabilities/31550

https://www.exploit-db.com/exploits/3143

https://www.exploit-db.com/exploits/3144

KEV Catalog EPSS Scores Vendors All CVEs