NetSight
high7.5Public exploit code

CVE-2007-1518

SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array.

Affected products

VendorProductAffected versions
WoltlabBurning Board
Versions 2.0, 2.0.3, 2.0_beta_3, 2.0_beta_4, 2.0_beta_5, 2.0_rc1

References