CVE-2006-6289: Woltlab Burning Board (wBB) Lite 1.0.2 does not properly unset variables when the input data includes a num...

Security readout for executives and security teams

This is an old SQL injection issue reported in Woltlab Burning Board Lite 1.0.2. If a legacy forum is still exposed, an unauthenticated remote attacker may be able to alter or read database content. The record notes ambiguity: the root cause may be a PHP unset behavior rather than the forum code itself. Exposure appears limited to systems still running Woltlab Burning Board Lite 1.0.2, especially internet-facing legacy forums. The bundle does not identify other affected Woltlab versions, CPEs, hosted services, or PHP versions, so broader exposure should not be assumed from these sources alone. Prioritize remediation if this forum software is still public-facing. The product version is legacy and the reported impact is database compromise, but urgency depends on whether the organization actually runs the named software. No active exploitation evidence is provided. Mitigation focus: Identify and retire any Woltlab Burning Board Lite 1.0.2 deployments.; Check Woltlab and PHP guidance for relevant fixes before changing production systems.; Upgrade to a supported forum platform or maintained Woltlab release..

Prepared

Jun 29, 2026, 08:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.