CVE-2006-1094

Published: Mar 9, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to (1) info_db.php or (2) database.php.

Affected (14)

Products: Datenbank Module: Datenbank Module · Woltlab: Burning Board

1 product

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Datenbank Module Datenbank Module	Up to 2.7
Woltlab Burning Board	Version 1.1.1
Woltlab Burning Board	Version 2.0_beta_3
Woltlab Burning Board	Version 2.0_beta_4
Woltlab Burning Board	Version 2.0_beta_5
Woltlab Burning Board	Version 2.0_rc1
Woltlab Burning Board	Version 2.0_rc2
Woltlab Burning Board	Version 2.2.2
Woltlab Burning Board	Version 2.3.1
Woltlab Burning Board	Version 2.3.3
Woltlab Burning Board	Version 2.4
Woltlab Burning Board	Version 2.5
Woltlab Burning Board	Version 2.6
Woltlab Burning Board	Version 2.7