CVE-2008-5863

CVE-2008-5863 describes an SQL injection in the Woltlab Burning Board (wBB) Userlocator module, version 3.0, via the y parameter in the get_user action within locator.php. The affected component is the Userlocator module for wBB; the vulnerability arises from unsafely handling user input, enablin...