CVE-2008-5863: SQL Injection
SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote attackers to execute arbitrary SQL commands via the y parameter in a getuser action.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5863?
CVE-2008-5863 is considered a critical SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2008-5863?
To fix CVE-2008-5863, update to the latest version of the Userlocator module or implement input validation to sanitize the y parameter.
Which software is affected by CVE-2008-5863?
CVE-2008-5863 affects the Userlocator module version 3.0 for WoltLab Burning Board.
Can CVE-2008-5863 lead to data compromise?
Yes, exploitation of CVE-2008-5863 can lead to unauthorized access and manipulation of the database.
What is the nature of the attack for CVE-2008-5863?
The attack for CVE-2008-5863 involves injecting malicious SQL queries via the vulnerable y parameter in a get_user action.