EIP-2026-113463

PRE-CVE

Woltlab Burning Board 2.x - Multiple SQL Injections

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-113463. PoCs published by CrAzY CrAcKeR.

AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in Woltlab Burning Board due to insufficient input sanitization. It lists example URLs where malicious SQL queries can be injected via parameters like 'userid', 'sid', and 'threadid'.

Description

Woltlab Burning Board 2.x - Multiple SQL Injections

Exploits (1)

exploitdb WRITEUP VERIFIED

by CrAzY CrAcKeR · textwebappsphp

https://www.exploit-db.com/exploits/28022

View Code ZIP pw:eip

The provided text describes SQL injection vulnerabilities in Woltlab Burning Board due to insufficient input sanitization. It lists example URLs where malicious SQL queries can be injected via parameters like 'userid', 'sid', and 'threadid'.

Classification

Writeup 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Woltlab Burning Board

No auth needed

Prerequisites: Access to vulnerable Woltlab Burning Board instance

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026