CVE-2006-2792

SQL injection vulnerability in misc.php in Woltlab Burning Board WBB 2.3.4 allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2006-2792

The CVE-2006-2792 entry concerns Woltlab Burning Board (WBB) 2.3.4. A SQL injection flaw exists in misc.php that lets remote attackers manipulate the database by supplying a crafted sid parameter, enabling arbitrary SQL execution. This is documented in the NVD entry for CVE-2006-2792 and reflecte...