Layerbb - vulnerabilities (CVEs)

8 CVEs in 1 products, 0 in the last 30 days, newest from 2026-05-16.

Products

CVE-2021-47954 - CVSS 8.8 (high), 2026-05-16: LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the…
CVE-2019-16531 - CVSS 8.8 (high), 2019-09-20: LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php.
CVE-2019-13972 - CVSS 6.1 (medium), 2019-07-19: LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997.
CVE-2019-13974 - CVSS 8.8 (high), 2019-07-19: LayerBB 1.1.3 allows conversations.php/cmd/new CSRF.
CVE-2019-13973 - CVSS 9.8 (critical), 2019-07-19: LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used.
CVE-2018-17997 - CVSS 6.1 (medium), 2019-03-21: LayerBB 1.1.1 allows XSS via the titles of conversations (PMs).
CVE-2018-17996 - CVSS 6.5 (medium), 2019-03-21: LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via…
CVE-2018-17988 - CVSS 9.8 (critical), 2019-03-07: LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter.