7.5
CVE-2006-3220
- EPSS 1.18%
- Veröffentlicht 24.06.2006 10:06:00
- Zuletzt bearbeitet 16.06.2026 22:26:38
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary SQL commands via the sid parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Woltlab ≫ Burning Board Version2.2.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.18% | 0.636 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://securityreason.com/securityalert/1142
http://www.securityfocus.com/archive/1/437115/100/100/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/27141