cbcvebase.
CVE-2005-0661
published 2005-05-02

CVE-2005-0661: SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute…

PriorityP432high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.11%
61.8th percentile
SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) lastvisit cookie.

Affected

4 ranges
VendorProductVersion rangeFixed in
woltlabburning_board——
woltlabburning_board——
woltlabburning_board——
woltlabburning_board——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.