CVE-2007-0812: SQL Injection
Published Feb 7, 2007
·Updated
SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitrary SQL commands via the pmid[0] parameter.
Affected Software
4 affected components
Woltlab Burning Board Lite=1.0.0
Woltlab Burning Board Lite=1.0.1e
Woltlab Burning Board Lite=1.0.2
Woltlab Burning Board Lite=1.0.2_pl3e
Event History
Feb 7, 2007
CVE Published
11:28 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-0812?
CVE-2007-0812 is classified as a high severity vulnerability due to its exploitation potential by authenticated users.
2
How do I fix CVE-2007-0812?
To fix CVE-2007-0812, you should upgrade to a newer version of Woltlab Burning Board Lite that includes patches for this vulnerability.
3
Who is affected by CVE-2007-0812?
CVE-2007-0812 affects all versions of Woltlab Burning Board Lite up to and including 1.0.2pl3e.
4
What type of vulnerability is CVE-2007-0812?
CVE-2007-0812 is an SQL injection vulnerability that allows remote authenticated users to execute arbitrary SQL commands.
5
What parameters are involved in CVE-2007-0812?
CVE-2007-0812 specifically involves the pmid[0] parameter within the pms.php file.