• info
• discussion
• exploit
• solution
• references

Woltlab Burning Board Search.PHP SQL Injection Vulnerability

Attackers can exploit this issue via a web client.

Proof of concept code is available:

• /data/vulnerabilities/exploits/22096.php
• /data/vulnerabilities/exploits/22096.pl
• /data/vulnerabilities/exploits/22096-2.pl