Description
SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to (1) info_db.php or (2) database.php.
Exploits (1)
References (5)
Scores
EPSS
0.0071
EPSS Percentile
72.4%
Details
Status
published
Products (14)
datenbank_module/datenbank_module
< 2.7
woltlab/burning_board
1.1.1
woltlab/burning_board
2.0_beta_3
woltlab/burning_board
2.0_beta_4
woltlab/burning_board
2.0_beta_5
woltlab/burning_board
2.0_rc1
woltlab/burning_board
2.0_rc2
woltlab/burning_board
2.2.2
woltlab/burning_board
2.3.1
woltlab/burning_board
2.3.3
... and 4 more
Published
Mar 09, 2006
Tracked Since
Feb 18, 2026