[MajorSecurity #26] Woltlab Burning Board - Multiple Cookie manipulation and session fixation vulnerabilities

MajorSecurity 26 Woltlab Burning Board - Multiple Cookie manipulation and session fixation vulnerabilities ---------------------------------------------------------------------------------------- Software: Woltlab Burning board Impact: Cookie manipulation and Session Fixation Made public: July,...

CVE-2006-3254

SQL injection vulnerability in newthread.php in Woltlab Burning Board WBB 2.0 RC2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter...

CVE-2006-3255

SQL injection vulnerability in showmods.php in Woltlab Burning Board WBB 1.2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter...

CVE-2006-3256

SQL injection vulnerability in report.php in Woltlab Burning Board WBB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the postid parameter...

CVE-2006-3256

SQL injection vulnerability in report.php in Woltlab Burning Board WBB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the postid parameter...

CVE-2006-3256

SQL injection vulnerability in report.php of Woltlab Burning Board (WBB ) 2.3.1 allows remote attackers to execute arbitrary SQL commands via the postid parameter. Root cause: likely improper input handling in the postid field. Exploitation details are not provided in the connected documents. No ...

CVE-2006-3254

Woltlab Burning Board (WBB) 2.0 RC2 contains a SQL injection in newthread.php that allows remote attackers to execute arbitrary SQL commands via the boardid parameter. The vulnerability is described in CVE-2006-3254; original sources confirm the affected component and impact, but do not provide a...

CVE-2006-3255

CVE-2006-3255 affects Woltlab Burning Board (WBB) 1.2. The vulnerability is a SQL injection in showmods.php via the boardid parameter, enabling remote attackers to execute arbitrary SQL commands. Exploitation details are not provided in the available documents. Affected component is showmods.php;...

CVE-2006-3254

SQL injection vulnerability in newthread.php in Woltlab Burning Board WBB 2.0 RC2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter...

CVE-2006-3255

SQL injection vulnerability in showmods.php in Woltlab Burning Board WBB 1.2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter...

CVE-2006-3218

SQL injection vulnerability in profile.php in Woltlab Burning Board WBB 2.1.6 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2006-3219

SQL injection vulnerability in thread.php in Woltlab Burning Board WBB 2.2.2 allows remote attackers to execute arbitrary SQL commands via the threadid parameter...

CVE-2006-3220

SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board WBB 2.2.1 allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2006-3220

SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board WBB 2.2.1 allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2006-3219

SQL injection vulnerability in thread.php in Woltlab Burning Board WBB 2.2.2 allows remote attackers to execute arbitrary SQL commands via the threadid parameter...

CVE-2006-3219

CVE-2006-3219 describes an SQL injection in thread.php of Woltlab Burning Board (WBB) 2.2.2, allowing remote attackers to execute arbitrary SQL via the threadid parameter. The issue affects the WBB component and under the provided documents yields a CVSS base score of 7.5 (HIGH) with network atta...

CVE-2006-3220

CVE-2006-3220 describes a SQL injection in the file studienplatztausch.php of Woltlab Burning Board (WBB) 2.2.1. The vulnerability allows remote attackers to craft input to the sid parameter and execute arbitrary SQL commands on the backend database. The available sources confirm the affected pro...

CVE-2006-3218

SQL injection vulnerability in profile.php in Woltlab Burning Board WBB 2.1.6 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2006-3218

The CVE-2006-3218 entry concerns Woltlab Burning Board (WBB) 2.1.6, where the profile.php component is vulnerable to SQL injection via the userid parameter. The root cause is improper handling of the userid input, enabling remote attackers to inject arbitrary SQL commands. The vulnerability is de...

Woltlab Burning Board 1.22.02.3 - showmods.php?boardid SQL Injection

Woltlab Burning Board 1.22.02.3 - showmods.php?boardid SQL Injection source: https://www.securityfocus.com/bid/18597/info WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before...