Vulnerabilities > CVE-2005-1554 - SQL Injection vulnerability in Wowbb web Forum 1.6/1.61/1.62

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
wowbb
nessus
NVD
Published: 2005-05-14
Updated: 2017-07-11

Summary

SQL injection vulnerability in view_user.php in WowBB 1.6, 1.61, and 1.62 allows remote attackers to execute arbitrary SQL commands via the sort_by parameter.

Vulnerable Configurations

Part Description Count
Application
Wowbb
3

Nessus

NASL familyCGI abuses
NASL idWOWBB_SQL_INJECTION.NASL
descriptionThe remote host is running WowBB, a web-based forum written in PHP. The remote version of this software is vulnerable to SQL injection attacks through the script
last seen2020-06-01
modified2020-06-02
plugin id18221
published2005-05-11
reporterThis script is Copyright (C) 2005-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/18221
titleWowBB view_user.php Multiple Parameter SQL Injection

References