CVE-2009-0851: Stewart Howe Celerbb

Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewforum.php and (2) viewtopic.php.

Affected products

Published 2009-03-09. Last modified 2026-06-16.