Unscored CVE-2006-2792 EUVD-2006-2789GHSA-r4g3-8h9q-x6rh

SQL injection vulnerability in misc.php in Woltlab Burning Board (WBB) 2.3.4 allows remote attackers to execute arbitrary SQL commands via …

Published Jun 3, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in misc.php in Woltlab Burning Board (WBB) 2.3.4 allows remote attackers to execute arbitrary SQL commands via the sid parameter.

References

20060531 Re: WBB<--v2.3.4"misc.php" SQL injection Vulnerability mailing-list
wbb-misc-sql-injection(26754) vdb-entry
20060529 WBB<--v2.3.4"misc.php" SQL injection Vulnerability mailing-list
1022 third-party-advisory