CVE-2002-0903: Woltlab Burning Board

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack on the new user ID and the code value.

Affected products

• Woltlab Burning Board: version 1.1.1 only

Published 2002-10-04. Last modified 2026-06-16.