Published: 03/12/2006 Updated: 17/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in the decode_cookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote malicious users to execute arbitrary SQL commands via the threadvisit Cookie parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
woltlab burning board lite 1.0.2

<?php print_r(' -------------------------------------------------------------------------------- Woltlab Burning Board Lite 102 decode_cookie() sql injection exploit by rgod retrog@aliceit site: retrogodaltervistaorg dork: "Powered by Burning Board Lite 102 * 2001-2004" -------------------------------------------------------------- ...

NVD-CWE-Other http://retrogod.altervista.org/wbblite_102_sql_mqg_bypass.html http://secunia.com/advisories/23077 http://securityreason.com/securityalert/1955 http://www.vupen.com/english/advisories/2006/4694 https://exchange.xforce.ibmcloud.com/vulnerabilities/30561 https://www.exploit-db.com/exploits/2841 http://www.securityfocus.com/archive/1/452561/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/2841/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-6237

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect