CVE-2006-3220

CVE-2006-3220 describes a SQL injection in the file studienplatztausch.php of Woltlab Burning Board (WBB) 2.2.1. The vulnerability allows remote attackers to craft input to the sid parameter and execute arbitrary SQL commands on the backend database. The available sources confirm the affected pro...

CVE-2006-3218

SQL injection vulnerability in profile.php in Woltlab Burning Board WBB 2.1.6 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2006-3218

The CVE-2006-3218 entry concerns Woltlab Burning Board (WBB) 2.1.6, where the profile.php component is vulnerable to SQL injection via the userid parameter. The root cause is improper handling of the userid input, enabling remote attackers to inject arbitrary SQL commands. The vulnerability is de...

CVE-2006-3220

SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board WBB 2.2.1 allows remote attackers to execute arbitrary SQL commands via the sid parameter...

Woltlab Burning Board 1.22.02.3 - report.php?postid SQL Injection

Woltlab Burning Board 1.22.02.3 - report.php?postid SQL Injection source: https://www.securityfocus.com/bid/18597/info WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before usin...

Woltlab Burning Board 1.22.02.3 - newthread.php?boardid SQL Injection

Woltlab Burning Board 1.22.02.3 - newthread.php?boardid SQL Injection source: https://www.securityfocus.com/bid/18597/info WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before...

Woltlab Burning Board 1.2/2.0/2.3 - 'report.php?postid' SQL Injection

source: https://www.securityfocus.com/bid/18597/info WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it in an SQL query. A successful exploit could allow an attacker...

Woltlab Burning Board 1.2/2.0/2.3 - 'newthread.php?boardid' SQL Injection

source: https://www.securityfocus.com/bid/18597/info WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it in an SQL query. A successful exploit could allow an attacker...

Woltlab Burning Board 1.2/2.0/2.3 - 'showmods.php?boardid' SQL Injection

source: https://www.securityfocus.com/bid/18597/info WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it in an SQL query. A successful exploit could allow an attacker...

Woltlab Burning Board 1.22.02.3 - showmods.php?boardid SQL Injection

Woltlab Burning Board 1.22.02.3 - showmods.php?boardid SQL Injection source: https://www.securityfocus.com/bid/18597/info WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before...

Woltlab Burning Board 2.x - Multiple SQL Injections

Woltlab Burning Board 2.x - Multiple SQL Injections source: https://www.securityfocus.com/bid/18423/info Woltlab Burning Board is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

Woltlab Burning Board 2.x - Multiple SQL Injections

source: https://www.securityfocus.com/bid/18423/info Woltlab Burning Board is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Sql injection

SQL injection vulnerability in misc.php in Woltlab Burning Board WBB 2.3.4 allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2006-2792

SQL injection vulnerability in misc.php in Woltlab Burning Board WBB 2.3.4 allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2006-2792

The CVE-2006-2792 entry concerns Woltlab Burning Board (WBB) 2.3.4. A SQL injection flaw exists in misc.php that lets remote attackers manipulate the database by supplying a crafted sid parameter, enabling arbitrary SQL execution. This is documented in the NVD entry for CVE-2006-2792 and reflecte...

CVE-2006-2792

SQL injection vulnerability in misc.php in Woltlab Burning Board WBB 2.3.4 allows remote attackers to execute arbitrary SQL commands via the sid parameter...

Woltlab Burning Board < 2.3.5 links.php cat Parameter SQL Injection

Binary data 3631.prm...

CVE-2006-2569

The CVE covers a SQL injection in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board. The vulnerability lies in the links.php component where the cat parameter can be manipulated to cause arbitrary SQL execution. This exposes data via the database and can compromise integrity thr...

CVE-2006-2569

SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Woltlab Burning Board 2.3.5 - links.php SQL Injection

Woltlab Burning Board 2.3.5 - links.php SQL Injection !/usr/bin/perl use IO::Socket; print q Woltlab Burning Board 2.3.4 newProto="tcp", PeerAddr="$webpage", PeerPort="80" || die "+ Can't connect to Server\n"; print "+ Exploiting....\n"; print $sock "GET $wbbdir HTTP/1.1\n"; print $sock "Accept:...