{"id":"CVE-2007-6518","aliases":["EUVD-2007-6484","GHSA-4vrv-fwxh-ff92"],"status":"published","title":"Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2...","description":"Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the (1) showposts, (2) sortby, and (3) sortorder parameters.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02263,"percentile":0.83114,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-89"],"published":"2007-12-24T20:00:00Z","modified":"2026-06-16T22:48:14Z","exploits":[{"source":"exploitdb","id":"EDB-3962","title":"Ol BookMarks Manager 0.7.4 - 'root' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-05-21","verified":true,"url":"https://www.exploit-db.com/exploits/3962"}],"products":[{"vendor":"woltlab","product":"burning_board_lite"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39174","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/485408/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/4300","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://secunia.com/advisories/28188","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/26973","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://www.osvdb.org/39497","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-6518"},{"url":"https://github.com/advisories/GHSA-4vrv-fwxh-ff92"}],"sources":{"cve":[{"id":"CVE-2007-6518","description":"Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the (1) showposts, (2) sortby, and (3) sortorder parameters.","status":"published","published":"2007-12-24T20:00:00Z","modified":"2024-08-07T16:11:05.709Z","updated_at":"2026-11-02T13:32:56.730199Z"}],"euvd":[{"id":"EUVD-2007-6484","description":"Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the (1) showposts, (2) sortby, and (3) sortorder parameters.","status":"published","published":"2007-12-24T20:00:00Z","modified":"2024-08-07T16:11:05Z","updated_at":"2026-11-03T01:16:12.823662Z"}],"ghsa":[{"id":"GHSA-4vrv-fwxh-ff92","title":"Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2...","description":"Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the (1) showposts, (2) sortby, and (3) sortorder parameters.","status":"published","published":"2022-05-01T18:43:46Z","modified":"2023-01-31T05:04:58Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:48:46.289568Z"}],"nvd":[{"id":"CVE-2007-6518","description":"Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the (1) showposts, (2) sortby, and (3) sortorder parameters.","status":"published","published":"2007-12-24T20:46:00Z","modified":"2026-06-16T22:48:14.987Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:01:24.110006Z"}]}}