W2b maintains a focused portfolio of web-based applications including online banking platforms and community software such as PHP Dating Club, PHP Greetcards, and PHP Adboard, targeting small-business and personal-website deployments. The recurring vulnerability surface concentrates on web application input-handling and code-generation weaknesses—SQL injection, cross-site scripting, code injection, and path traversal—characteristic of PHP-era web frameworks, and the vendor's disclosures frequently acquire public exploit code. Defenders should treat W2b products as requiring input-validation and output-encoding hardening; live severity, exploitation activity, and current exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by W2b over time
Signals from CVEs in this vendor scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-6921HIGH Unrestricted file upload vulnerability in index.php in phpAdBoard 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then acces | Aug 10, 2009 | 7.5 | 30 | NO | YES |
CVE-2008-6920HIGH Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension during a | Aug 10, 2009 | 7.5 | 30 | NO | YES |
CVE-2008-3179HIGH Directory traversal vulnerability in website.php in Web 2 Business (W2B) phpDatingClub (aka Dating Club) 3.7 allows remote attackers to include and execute arbitrary local files vi | Jul 15, 2008 | 7.5 | 29 | NO | YES |
CVE-2009-2179HIGH SQL injection vulnerability in search.php in phpDatingClub 3.7 allows remote attackers to execute arbitrary SQL commands via the sform[day] parameter. | Jun 23, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-1893HIGH PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ilang parameter. | Apr 18, 2008 | 7.5 | 28 | NO | YES |
CVE-2008-1843HIGH SQL injection vulnerability in browse.php in W2B DatingClub (aka Dating Club) allows remote attackers to execute arbitrary SQL commands via the age_to parameter in a browsebyCat ac | Apr 16, 2008 | 7.5 | 28 | NO | YES |
CVE-2008-1844HIGH SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter. | Apr 16, 2008 | 7.5 | 28 | NO | YES |
CVE-2008-6849MEDIUM Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, the | Jul 7, 2009 | 6.8 | 27 | NO | YES |
CVE-2007-3175HIGH Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands via (1) the draft parameter to mailer.w2b or (2) the listDocPa | Jun 11, 2007 | 7.5 | 26 | NO | NO |
CVE-2008-6848MEDIUM Cross-site scripting (XSS) vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to inject arbitrary web script or HTML via the category parameter in a select act | Jul 7, 2009 | 4.3 | 21 | NO | YES |
Signals from CVEs in this vendor scope (14 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by W2b.
Media articles that mention a CVE ID that affects a product developed by W2b — matched by CVE ID, not by vendor name.