7.5
CVE-2006-3256
- EPSS 1.11%
- Veröffentlicht 28.06.2006 01:45:00
- Zuletzt bearbeitet 16.06.2026 22:26:43
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
SQL injection vulnerability in report.php in Woltlab Burning Board (WBB) 2.3.1 allows remote attackers to execute arbitrary SQL commands via the postid parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Woltlab ≫ Burning Board Version2.3.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.11% | 0.617 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://securitytracker.com/id?1016374
http://www.securityfocus.com/bid/18597
http://seclists.org/lists/bugtraq/2006/Jun/0614.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/27351