Unscored CVE-2006-3218 EUVD-2006-3215GHSA-2jw7-h7hg-m8m7

SQL injection vulnerability in profile.php in Woltlab Burning Board (WBB) 2.1.6 allows remote attackers to execute arbitrary SQL commands v…

Published Jun 24, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in profile.php in Woltlab Burning Board (WBB) 2.1.6 allows remote attackers to execute arbitrary SQL commands via the userid parameter.

References

wbb-profile-sql-injection(27143) vdb-entry
1144 third-party-advisory
20060614 wbb<<--v 2.1.6 "profile.php" SQL injection mailing-list