CVE-2006-1097

The CVE-2006-1097 applies to Woltlab Burning Board’s Datenbank MOD 2.7 and earlier. The vulnerability is a cross-site scripting (XSS) flaw triggered via the fileid parameter in either info_db.php or database.php, allowing remote attackers to inject arbitrary scripts/HTML. The root cause is improp...