Vulnerabilities > CVE-2002-1505 - SQL Injection vulnerability in Woltlab Burning Board 2.0Beta3/2.0Beta4/2.0Beta5

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
woltlab
exploit available
NVD
Published: 2003-04-02
Updated: 2008-09-05

Summary

SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter.

Vulnerable Configurations

Part Description Count
Application
Woltlab
4

Exploit-Db

descriptionWoltLab Burning Board 2.0 SQL Injection Vulnerability. CVE-2002-1505. Webapps exploit for php platform
idEDB-ID:21779
last seen2016-02-02
modified2002-09-09
published2002-09-09
reporterCano2
sourcehttps://www.exploit-db.com/download/21779/
titleWoltLab Burning Board 2.0 - SQL Injection Vulnerability

References