CVE-2006-3218: SQL Injection
Published Jun 24, 2006
·Updated
SQL injection vulnerability in profile.php in Woltlab Burning Board (WBB) 2.1.6 allows remote attackers to execute arbitrary SQL commands via the userid parameter.
Affected Software
1 affected component
WoltLab Burning Board=2.1.6
Event History
Jun 24, 2006
CVE Published
10:06 AM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3218?
CVE-2006-3218 is classified as a high severity vulnerability due to its potential for executing arbitrary SQL commands.
2
How do I fix CVE-2006-3218?
To fix CVE-2006-3218, it is recommended to upgrade to a patched version of Woltlab Burning Board that eliminates the SQL injection vulnerability.
3
What exploitation methods can be used with CVE-2006-3218?
Attackers can exploit CVE-2006-3218 by manipulating the userid parameter in HTTP requests to execute malicious SQL queries.
4
Which versions are affected by CVE-2006-3218?
CVE-2006-3218 specifically affects Woltlab Burning Board version 2.1.6.
5
What type of vulnerability is CVE-2006-3218?
CVE-2006-3218 is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.