CVE-2006-6237: SQL Injection
Published Dec 3, 2006
·Updated
SQL injection vulnerability in the decodecookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threadvisit Cookie parameter.
Affected Software
1 affected component
Woltlab Burning Board Lite=1.0.2
Event History
Dec 3, 2006
CVE Published
07:28 PM
Data Sourced
via NVD·07:28 PM
DescriptionSeverityAffected Software
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-6237?
CVE-2006-6237 is classified as a critical vulnerability due to its potential for remote code execution through SQL injection.
2
How do I fix CVE-2006-6237?
To fix CVE-2006-6237, upgrade Woltlab Burning Board Lite to a version that addresses this vulnerability.
3
What systems are affected by CVE-2006-6237?
CVE-2006-6237 specifically affects Woltlab Burning Board Lite version 1.0.2.
4
What type of attack can occur with CVE-2006-6237?
CVE-2006-6237 allows remote attackers to execute arbitrary SQL commands via crafted cookie data.
5
Is there a known exploit for CVE-2006-6237?
Yes, there are known exploits that demonstrate the SQL injection capabilities of CVE-2006-6237.