CVE-2010-1338

CVE-2010-1338 affects the WoltLab Burning Board’s Teamsite Hack plugin (versions 3.0 and earlier) via ts_other.php. The vulnerability is a SQL injection in the modboard action, exploitable through the userid parameter, allowing remote attackers to execute arbitrary SQL commands. Documented impact...

CVE-2010-1339

CVE-2010-1339 is a cross-site scripting (XSS) vulnerability affecting the WoltLab Burning Board installation using the Teamsite Hack plugin (3.0 and earlier). The issue is triggered by the userid parameter in a modboard action within ts_other.php, where user input is inappropriately handled insid...