Lucene search

[email protected]CVE-2006-5029

HistorySep 27, 2006 - 11:07 p.m.

CVE-2006-5029

2006-09-2723:07:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-5029

sql injection

vulnerability

thread.php

woltlab burning board

wbb 2.3.x

remote attackers

php

mysql

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.8%

JSON

SQL injection vulnerability in thread.php in WoltLab Burning Board (wBB) 2.3.x allows remote attackers to obtain the version numbers of PHP, MySQL, and wBB via the page parameter. NOTE: this issue might be a forced SQL error. Also, the original report was disputed by a third party for 2.3.3 and 2.3.4.

CPENameOperatorVersion
woltlab:burning_boardwoltlab burning boardeq2.3.2
woltlab:burning_boardwoltlab burning boardeq2.3.4
woltlab:burning_boardwoltlab burning boardeq2.3.0
woltlab:burning_boardwoltlab burning boardeq2.3.3
woltlab:burning_boardwoltlab burning boardeq2.3.1
woltlab:burning_boardwoltlab burning boardeq2.3.5

CPE	Name	Operator	Version
woltlab:burning_board	woltlab burning board	eq	2.3.2
woltlab:burning_board	woltlab burning board	eq	2.3.4
woltlab:burning_board	woltlab burning board	eq	2.3.0
woltlab:burning_board	woltlab burning board	eq	2.3.3
woltlab:burning_board	woltlab burning board	eq	2.3.1
woltlab:burning_board	woltlab burning board	eq	2.3.5

References

www.securityfocus.com/archive/1/446743/100/0/threaded

www.securityfocus.com/archive/1/446937/100/0/threaded

www.securityfocus.com/archive/1/446938/100/100/threaded

www.securityfocus.com/archive/1/447069/100/100/threaded

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.8%

JSON

Related for CVE-2006-5029

cvelist1