Show filters
39 Total Results
Displaying 21-30 of 39
Sort by:
Attacker Value
Unknown
CVE-2006-3219
Disclosure Date: June 24, 2006 (last updated October 04, 2023)
SQL injection vulnerability in thread.php in Woltlab Burning Board (WBB) 2.2.2 allows remote attackers to execute arbitrary SQL commands via the threadid parameter.
0
Attacker Value
Unknown
CVE-2006-3220
Disclosure Date: June 24, 2006 (last updated October 04, 2023)
SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary SQL commands via the sid parameter.
0
Attacker Value
Unknown
CVE-2006-3218
Disclosure Date: June 24, 2006 (last updated October 04, 2023)
SQL injection vulnerability in profile.php in Woltlab Burning Board (WBB) 2.1.6 allows remote attackers to execute arbitrary SQL commands via the userid parameter.
0
Attacker Value
Unknown
CVE-2006-2792
Disclosure Date: June 03, 2006 (last updated October 04, 2023)
SQL injection vulnerability in misc.php in Woltlab Burning Board (WBB) 2.3.4 allows remote attackers to execute arbitrary SQL commands via the sid parameter.
0
Attacker Value
Unknown
CVE-2006-2569
Disclosure Date: May 24, 2006 (last updated October 04, 2023)
SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows remote attackers to execute arbitrary SQL commands via the cat parameter.
0
Attacker Value
Unknown
CVE-2006-1324
Disclosure Date: March 21, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in acp/lib/class_db_mysql.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated.
0
Attacker Value
Unknown
CVE-2006-1215
Disclosure Date: March 14, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the percent parameter. NOTE: this issue has been disputed in a followup post, although the original disclosure might be related to reflected XSS.
0
Attacker Value
Unknown
CVE-2006-1094
Disclosure Date: March 09, 2006 (last updated February 22, 2025)
SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to (1) info_db.php or (2) database.php.
0
Attacker Value
Unknown
CVE-2006-1034
Disclosure Date: March 07, 2006 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to galerie_index.php and possibly (2) galerie_onfly.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. The second vector might not be XSS.
0
Attacker Value
Unknown
CVE-2006-0927
Disclosure Date: February 28, 2006 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board (wBB) 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) userid parameter in (a) jgs_galerie_slideshow.php and (b) jgs_galerie_scroll.php, and the (2) katid parameter in (c) jgs_galerie_slideshow.php.
0
