CVE-2008-5956

CVE-2008-5956 affects Wbstreet (PHPSTREET Webboard) 1.0. The root cause is improper access control that leaves sensitive data under the web root, enabling remote attackers to retrieve database credentials by requesting connect.inc directly. Public references note that the issue has exploitable ch...

CVE-2008-5955

CVE-2008-5955 affects Wbstreet (aka PHPSTREET Webboard) 1.0. The vulnerability is an SQL injection in show.php via the id parameter, allowing remote attackers to craft SQL commands. This is the stated root cause: unsanitized input in the id parameter leading to arbitrary SQL execution. Public ref...