CVE-2007-0388: Woltlab Burning Board

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids[1] and other boardids[] parameters.

Affected products

• Woltlab Burning Board: up to and including 1.0.2; up to and including 2.3.6

Published 2007-01-19. Last modified 2026-06-16.