CVE-2005-0284: SQL Injection

Published Jan 10, 2005

Updated

SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the user-agent parameter.

Affected Software

2 affected components

Woltlab Burning Book=1.1.1e

Woltlab Burning Book=1.0_gold

Event History

Jan 10, 2005

CVE Published

05:00 AM

Feb 10, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-0284?

The severity of CVE-2005-0284 is considered high due to the potential for remote code execution through SQL injection.

How do I fix CVE-2005-0284?

To fix CVE-2005-0284, it's recommended to update WoltLab Burning Book to the latest patched version or implement input validation on the user-agent parameter.

What versions are affected by CVE-2005-0284?

CVE-2005-0284 affects WoltLab Burning Book versions 1.0 Gold, 1.1.1e, and potentially other versions.

What is the impact of exploiting CVE-2005-0284?

Exploiting CVE-2005-0284 allows attackers to execute arbitrary SQL commands, which can lead to data breaches or complete system compromise.

Who is at risk for CVE-2005-0284?

Websites using affected versions of WoltLab Burning Book are at risk for CVE-2005-0284.