2.0.rc1

DATE	CVE	VULNERABILITY TITLE	RISK
2007-03-20	CVE-2007-1518	SQL Injection vulnerability in Woltlab Burning Board UserGroups.PHP SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array. network low complexity woltlab	7.5
2006-05-24	CVE-2006-2569	SQL Injection vulnerability in Woltlab Burning Board Links.PHP SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows remote attackers to execute arbitrary SQL commands via the cat parameter. network low complexity 4r-linklist woltlab	7.5
2006-03-09	CVE-2006-1094	SQL Injection vulnerability in Woltlab Burning Board SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to (1) info_db.php or (2) database.php. network low complexity datenbank-module woltlab	7.5
2006-03-07	CVE-2006-1034	Cross-Site Scripting vulnerability in Woltlab Burning Board Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to galerie_index.php and possibly (2) galerie_onfly.php. network woltlab	4.3