NetSight
high7.5

CVE-2005-1554

SQL injection vulnerability in view_user.php in WowBB 1.6, 1.61, and 1.62 allows remote attackers to execute arbitrary SQL commands via the sort_by parameter.

Impact

SQL injection vulnerability in view_user.php in WowBB 1.6, 1.61, and 1.62 allows remote attackers to execute arbitrary SQL commands via the sort_by parameter.

Affected products

VendorProductAffected versions
WowbbWowbb Web Forum
Versions 1.6, 1.61, 1.62

References