Unscored severity · published Jun 15, 2007
CVE-2007-3244
SQL injection vulnerability in bb-includes/formatting-functions.php in bbPress before 0.8.1 might allow remote attackers to execute arbitrary SQL commands via unspecified vectors…
–
CVSS
1.8%
EPSS
No
On KEV
Description
SQL injection vulnerability in bb-includes/formatting-functions.php in bbPress before 0.8.1 might allow remote attackers to execute arbitrary SQL commands via unspecified vectors to forums/bb-edit.php, as demonstrated by a PRE element, aka the "quircky slashes bug."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BB
Bbpress · Bbpress
0.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3244
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3244
Patch
http://bbpress.org/blog/2007/02/bbpress-081/
osvdb.org
http://osvdb.org/36606
secunia.com
http://secunia.com/advisories/25696
trac.bbpress.org
http://trac.bbpress.org/changeset/717
trac.bbpress.org
http://trac.bbpress.org/ticket/592
www.securityfocus.com
http://www.securityfocus.com/bid/24488
More from Bbpress
9.8
CVE-2020-13693
An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled
6.1
CVE-2011-1150
bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter
4.8
CVE-2020-13487
The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/edit.php?post_type=forum (aka the Forum…
3.7
CVE-2026-110762
bbPress before 2.6.19 Information Disclosure via BuddyPress Activity Stream
–
CVE-2011-3710
bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated…