CVE-2006-5029 | BDVDB-2026-19446 Detail

Description#

SQL injection vulnerability in thread.php in WoltLab Burning Board (wBB) 2.3.x allows remote attackers to obtain the version numbers of PHP, MySQL, and wBB via the page parameter. NOTE: this issue might be a forced SQL error. Also, the original report was disputed by a third party for 2.3.3 and 2.3.4.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/447069/100/100/threaded
http://www.securityfocus.com/archive/1/446937/100/0/threaded
http://www.securityfocus.com/archive/1/446743/100/0/threaded
http://www.securityfocus.com/archive/1/446938/100/100/threaded

Exploit#

No public exploit known

History#

Version 12006-09-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.