CVE Vulnerabilities

CVE-2005-0284

Published: Jan 10, 2005 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the user-agent parameter.

Affected Software

NameVendorStart VersionEnd Version
Burning_bookWoltlab1.0_gold (including)1.0_gold (including)
Burning_bookWoltlab1.1.1e (including)1.1.1e (including)

References