Woltlab Burning Board is prone to multiple input-validation vulnerabilities, including: - Multiple security that may allow attackers to delete private messages - A cross-site scripting vulnerability - Multiple URI redirection vulnerabilities Attackers can exploit these issues to delete private messages, execute arbitrary script code, steal cookie-based authentication credentials and redirect users to malicious sites. Vulnerable: Woltlab Burning Board 3.0.5 Woltlab Burning Board 3.0.3 PL 1 Woltlab Burning Board 3.0

• http://www.securityfocus.com/bid/34057

---

Updated on 2015-03-25