SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the (1) x or (2) y parameters.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Burning_board | Woltlab | 2.2.2 (including) | 2.2.2 (including) |
| Burning_board | Woltlab | 2.2.3 (including) | 2.2.3 (including) |