high7.5Public exploit code
CVE-2008-1640
SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board (wBB) allows remote attackers to exe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection2008-03-31 · webapps · php · Verified
Impact
SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board (wBB) allows remote attackers to execute arbitrary SQL commands via the view_id parameter in an ansicht action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jgs-Xa | Jgs Treffen | through 2.0.2 Version 2.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/28530
- http://www.vupen.com/english/advisories/2008/1054/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41556
- https://www.exploit-db.com/exploits/5329
- http://www.securityfocus.com/bid/28530
- http://www.vupen.com/english/advisories/2008/1054/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41556
- https://www.exploit-db.com/exploits/5329