Unscored CVE-2006-3220 EUVD-2006-3217GHSA-mxxv-jp8w-9g8x

SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary SQL…

Published Jun 24, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary SQL commands via the sid parameter.

References

wbb-studienplatztausch-sql-injection(27141) vdb-entry
1142 third-party-advisory
20060614 wbb<<--v 2.2.1 "studienplatztausch.php" SQL injection mailing-list