Lucene search

MitreCVE-2006-6237

HistoryDec 03, 2006 - 7:28 p.m.

CVE-2006-6237

2006-12-0319:28:00

mitre

web.nvd.nist.gov

cve-2006-6237

sql injection

woltlab burning board lite

thread.php

remote attackers

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.009

Percentile

83.1%

JSON

SQL injection vulnerability in the decode_cookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threadvisit Cookie parameter.

Affected configurations

Nvd

Node

woltlabburning_board_liteMatch1.0.2

VendorProductVersionCPE
woltlabburning_board_lite1.0.2cpe:2.3:a:woltlab:burning_board_lite:1.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
woltlab	burning_board_lite	1.0.2	cpe:2.3:a:woltlab:burning_board_lite:1.0.2:::::::*

References

retrogod.altervista.org/wbblite_102_sql_mqg_bypass.html

secunia.com/advisories/23077

securityreason.com/securityalert/1955

www.securityfocus.com/archive/1/452561/100/0/threaded

www.vupen.com/english/advisories/2006/4694

exchange.xforce.ibmcloud.com/vulnerabilities/30561

www.exploit-db.com/exploits/2841

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.009

Percentile

83.1%

JSON

Related for CVE-2006-6237