Description
SQL injection vulnerability in thread.php in Woltlab Burning Board (WBB) 2.2.2 allows remote attackers to execute arbitrary SQL commands via the threadid parameter.
References
- 1143 third-party-advisory
- 20060614 wbb<<--v 2.2.2 "thread.php" SQL injection mailing-list
- wbb-thread-sql-injection(27138) vdb-entry