header-logo
Suggest Exploit
vendor:
Burning Board
by:
SecurityFocus
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Burning Board
Affected Version From: MOD Guthabenhack For Woltlab Burning Board
Affected Version To: MOD Guthabenhack For Woltlab Burning Board
Patch Exists: Unknown
Related CWE: N/A
CPE: a:woltlab:burning_board
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Unknown
2002

MOD Guthabenhack For Woltlab Burning Board reported prone to an SQL injection vulnerability

MOD Guthabenhack For Woltlab Burning Board is prone to an SQL injection vulnerability due to insufficient sanitization of user input. This vulnerability allows an attacker to bypass authentication methods via SQL injection attacks.

Mitigation:

Input validation should be used to ensure that user-supplied data is properly sanitized.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/8321/info

MOD Guthabenhack For Woltlab Burning Board reported prone to an SQL injection vulnerability.

It has been reported that MOD Guthabenhack fails to sufficiently sanitize user input. It has been reported that this may allow the attacker to bypass authentication methods via SQL injection attacks.

javascript:x=document.forms[0].geworbenv;x.value=",
groupid=1";alert(x.value);