EUVD-2008-5833

Malware in sbrugna...

Sql injection

SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board wBB allows remote attackers to execute arbitrary SQL commands via the y parameter in a getuser action...

CVE-2008-5863

CVE-2008-5863 describes an SQL injection in the Woltlab Burning Board (wBB) Userlocator module, version 3.0, via the y parameter in the get_user action within locator.php. The affected component is the Userlocator module for wBB; the vulnerability arises from unsafely handling user input, enablin...