33872vdb entry
http://osvdb.org/33872 CVE-2007-0388
Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (1)
Record summary
CVE-2007-0388 has a selected CVSS score of 7.5; EIP currently links 3 catalogued exploits.
Description
SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids[1] and other boardids[] parameters.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 3
Proofs of concept
3Catalogued exploits
ExploitDBWoltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (1)ExploitDB exploitby silent vaporNot analyzed1 file
ExploitDBWoltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (2)ExploitDB exploitby trewNot analyzed1 file
ExploitDBWoltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (3)ExploitDB exploitby 666Not analyzed1 file
References
5wbb-search-sql-injection(31550)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/31550 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-0388 3143exploit
https://www.exploit-db.com/exploits/3143 3144exploit
https://www.exploit-db.com/exploits/3144