Lucene search

[email protected]CVE-2007-6518

HistoryDec 24, 2007 - 8:46 p.m.

CVE-2007-6518

2007-12-2420:46:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2007-6518

sql injection

woltlab burning board

wbb lite 1.0.2

remote attackers

nvd

9.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

65.8%

JSON

Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the (1) showposts, (2) sortby, and (3) sortorder parameters.

CPENameOperatorVersion
woltlab:burning_board_litewoltlab burning board liteeq1.0.2
woltlab:burning_board_litewoltlab burning board liteeq1.0.2_pl3e

CPE	Name	Operator	Version
woltlab:burning_board_lite	woltlab burning board lite	eq	1.0.2
woltlab:burning_board_lite	woltlab burning board lite	eq	1.0.2_pl3e

References

secunia.com/advisories/28188

www.osvdb.org/39497

www.securityfocus.com/archive/1/485408/100/0/threaded

www.securityfocus.com/bid/26973

www.vupen.com/english/advisories/2007/4300

exchange.xforce.ibmcloud.com/vulnerabilities/39174

9.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

65.8%

JSON

Related for CVE-2007-6518

prion1