Unscored CVE-2005-0284 EUVD-2005-0285GHSA-wx2j-r584-v9qv

SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers …

Published Feb 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the user-agent parameter.

References

20050110 Woltlab Burning Book addentry.php SQL Injection mailing-list
woltlab-book-addentry-sql-injection(18859) vdb-entry