Vulnerabilities > CVE-2006-5508 - Unspecified vulnerability in Woltlab Burning Book 1.1.2
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN woltlab
exploit available
Summary
Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via (1) the n parameter and (2) the User-Agent HTTP header.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | WoltLab Burning Book <= 1.1.2 Remote SQL Injection Exploit PoC. CVE-2006-5508,CVE-2006-5509. Webapps exploit for php platform |
| id | EDB-ID:2579 |
| last seen | 2016-01-31 |
| modified | 2006-10-16 |
| published | 2006-10-16 |
| reporter | ShAnKaR |
| source | https://www.exploit-db.com/download/2579/ |
| title | WoltLab Burning Book <= 1.1.2 - Remote SQL Injection Exploit PoC |
References
- http://secunia.com/advisories/22442
- http://secunia.com/advisories/22442
- http://securityreason.com/securityalert/1774
- http://securityreason.com/securityalert/1774
- http://www.security.nnov.ru/Odocument711.html
- http://www.security.nnov.ru/Odocument711.html
- http://www.securityfocus.com/archive/1/448796/100/100/threaded
- http://www.securityfocus.com/archive/1/448796/100/100/threaded
- http://www.vupen.com/english/advisories/2006/4062
- http://www.vupen.com/english/advisories/2006/4062