Sql injection

2006-05-2423:02:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%

JSON

SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CPENameOperatorVersion
4r_linklisteq<= 1.0-rc2
burning_boardeq2.0.0-beta4
burning_boardeq2.2.2
burning_boardeq2.3.4
burning_boardeq2.3.3
burning_boardeq2.3.1
burning_boardeq2.0.0-beta3
burning_boardeq2.0.0-rc1
burning_boardeq2.0.0-beta5
burning_boardeq2.0.0-rc2

Name	Operator	Version
4r_linklist	eq	<= 1.0-rc2
burning_board	eq	2.0.0-beta4
burning_board	eq	2.2.2
burning_board	eq	2.3.4
burning_board	eq	2.3.3
burning_board	eq	2.3.1
burning_board	eq	2.0.0-beta3
burning_board	eq	2.0.0-rc1
burning_board	eq	2.0.0-beta5
burning_board	eq	2.0.0-rc2