Beveiligingsadvies

CVE-2006-5509

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2006-10-25 22:00:00

Laatst bijgewerkt 2024-08-07 19:55:52

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted POST requests that store PHP code in a database that is later processed by eval, as demonstrated using SQL injection via the n parameter.

← Alle CVE's bekijken Bekijk op cve.org ↗