CVE:CVE-2007-0812
CNNVD:CNNVD-200702-131
Woltlab Burning Board (wBB) Lite 1.0.2pl3e版本及其早期版本的pms.php中存在SQL注入漏洞。远程验证用户可以借助pmid[0]参数，执行任意SQL指令。
solution:Upgrade woltlab burning_board_lite to a higher version than 1.0.0,1.0.1e,1.0.2,1.0.2_pl3e,and avoid the version 1.0.0,1.0.1e,1.0.2,1.0.2_pl3e