Woltlab Burning Board <= 2.3.5 (links.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print q Woltlab Burning Board 2.3.4 = "links.php" SQL Injection Exploit - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Exploit by | 666 SR-Crew Bug by | x82 Googledork | inurl:/wbb2/links.php?cat Usage | links....

Woltlab Burning Board <= 2.3.5 (links.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ Woltlab Burning Board newProto="tcp", PeerAddr=...

Woltlab Burning Board 2.3.5 - 'links.php' SQL Injection

!/usr/bin/perl use IO::Socket; print q Woltlab Burning Board 2.3.4 newProto="tcp", PeerAddr="$webpage", PeerPort="80" || die "+ Can't connect to Server\n"; print "+ Exploiting....\n"; print $sock "GET $wbbdir HTTP/1.1\n"; print $sock "Accept: /\n"; print $sock "User-Agent: Hacker\n"; print $sock...

CVE-2006-1324

Cross-site scripting XSS vulnerability in acp/lib/classdbmysql.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated...

Cross site scripting

Cross-site scripting XSS vulnerability in acp/lib/classdbmysql.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated...

CVE-2006-1324

Cross-site scripting XSS vulnerability in acp/lib/classdbmysql.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated...

CVE-2006-1324

CVE-2006-1324 describes a Cross-site Scripting (XSS) vulnerability in Woltlab Burning Board (wBB) 2.3.4, specifically in acp/lib/class_db_mysql.php. An attacker can inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated, potentially affecting users who view t...

Woltlab Burning Board 2.3.4 - 'Class_DB_MySQL.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17147/info Woltlab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

Woltlab Burning Board 2.3.4 - Class_DB_MySQL.php Cross-Site Scripting

Woltlab Burning Board 2.3.4 - ClassDBMySQL.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17147/info Woltlab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this...

CVE-2006-1215

Cross-site scripting XSS vulnerability in misc.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the percent parameter. NOTE: this issue has been disputed in a followup post, although the original disclosure might be related to reflected XSS...

Cross site scripting

Cross-site scripting XSS vulnerability in misc.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the percent parameter. NOTE: this issue has been disputed in a followup post, although the original disclosure might be related to reflected XSS...

CVE-2006-1215

Cross-site scripting XSS vulnerability in misc.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the percent parameter. NOTE: this issue has been disputed in a followup post, although the original disclosure might be related to reflected XSS...

CVE-2006-1215

The CVE-2006-1215 entry describes a Cross‑site Scripting (XSS) vulnerability in Woltlab Burning Board (wBB) version 2.3.4, specifically in misc.php via the percent parameter. The underlying issue is reflected XSS-type behavior (as per the description, including notes of dispute about the disclosu...

CVE-2006-1097

Multiple cross-site scripting XSS vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow remote attackers to inject arbitrary web script or HTML via the fileid parameter to 1 infodb.php or 2 database.php...

Sql injection

SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to 1 infodb.php or 2 database.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow remote attackers to inject arbitrary web script or HTML via the fileid parameter to 1 infodb.php or 2 database.php...

CVE-2006-1097

Multiple cross-site scripting XSS vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow remote attackers to inject arbitrary web script or HTML via the fileid parameter to 1 infodb.php or 2 database.php...

CVE-2006-1094

SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to 1 infodb.php or 2 database.php...

CVE-2006-1097

The CVE-2006-1097 applies to Woltlab Burning Board’s Datenbank MOD 2.7 and earlier. The vulnerability is a cross-site scripting (XSS) flaw triggered via the fileid parameter in either info_db.php or database.php, allowing remote attackers to inject arbitrary scripts/HTML. The root cause is improp...

CVE-2006-1094

CVE-2006-1094 affects Woltlab Burning Board; the OpenVAS/NVD entries describe a SQL injection in the Database module. The vulnerable component is the Database module’s handling of the fileid parameter in info_db.php (and related database.php), which can allow remote SQL injection. The documents d...