CVE-2006-3220: SQL Injection
Published Jun 24, 2006
·Updated
SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary SQL commands via the sid parameter.
Affected Software
1 affected component
WoltLab Burning Board=2.2.1
Event History
Jun 24, 2006
CVE Published
10:06 AM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3220?
CVE-2006-3220 has a medium severity level as it allows attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2006-3220?
To fix CVE-2006-3220, update WoltLab Burning Board to a version that is not affected by this SQL injection vulnerability.
3
What systems are affected by CVE-2006-3220?
CVE-2006-3220 specifically affects WoltLab Burning Board version 2.2.1.
4
Who can exploit CVE-2006-3220?
Remote attackers can exploit CVE-2006-3220 by sending crafted requests that manipulate the sid parameter.
5
What impact can CVE-2006-3220 have on my application?
CVE-2006-3220 can lead to unauthorized database access, data manipulation, or leakage of sensitive information.