Unscored CVE-2006-5029 EUVD-2006-5015GHSA-2f24-pwmq-42fq

SQL injection vulnerability in thread.php in WoltLab Burning Board (wBB) 2.3.x allows remote attackers to obtain the version numbers of PHP…

Published Sep 27, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in thread.php in WoltLab Burning Board (wBB) 2.3.x allows remote attackers to obtain the version numbers of PHP, MySQL, and wBB via the page parameter. NOTE: this issue might be a forced SQL error. Also, the original report was disputed by a third party for 2.3.3 and 2.3.4.

References

20060926 Re: Re: Woltlab Burning Board 2.3.X SQL Injection Vulnerability mailing-list
20060923 Re: Woltlab Burning Board 2.3.X SQL Injection Vulnerability mailing-list
20060921 Woltlab Burning Board 2.3.X SQL Injection Vulnerability mailing-list
20060924 Re: Woltlab Burning Board 2.3.X SQL Injection Vulnerability mailing-list