CVE-2005-3369 Multiple SQL injection vulnerabilities in the Info-DB module (info_db.php) in Woltlab Burning Board 2.7 and earlier allow remote attackers to execute arbitrary SQL commands and possibly upload files v...
HighCVSS 7.5
EPSS 1.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in the Info-DB module (info_db.php) in Woltlab Burning Board 2.7 and earlier allow remote attackers to execute arbitrary SQL commands and possibly upload files via the (1) fileid and (2) subkatid parameters.
Affected products
No affected product data has been published yet.
References
- 20051026 Woltlab Burning Board info_db.php multiple SQL injection mailing-list
- 17347 third-party-advisory vendor-advisory
- 119 third-party-advisory
- 20330 vdb-entry
- 15214 exploit vdb-entry
- ADV-2005-2224 vdb-entry
- wbb-infodb-sql-injection(22887) vdb-entry