high7.5Public exploit code
CVE-2006-1094
SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Woltlab Burning Board 2.x - Datenbank MOD 'fileid' SQL Injection2006-03-01 · webapps · php · Verified
Impact
SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to (1) info_db.php or (2) database.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Datenbank Module | Datenbank Module | through 2.7 |
| Woltlab | Burning Board | Versions 1.1.1, 2.0_beta_3, 2.0_beta_4, 2.0_beta_5, 2.0_rc1, 2.0_rc2 |
References
- NVD record
- CVE.org record
- http://www.nukedx.com/?viewdoc=17
- http://www.osvdb.org/23808
- http://www.osvdb.org/23810
- http://www.securityfocus.com/archive/1/426583
- http://www.securityfocus.com/bid/16914
- http://www.nukedx.com/?viewdoc=17
- http://www.osvdb.org/23808
- http://www.osvdb.org/23810
- http://www.securityfocus.com/archive/1/426583
- http://www.securityfocus.com/bid/16914