CVE-2007-6518 Information

Description

Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the (1) showposts (2) sortby and (3) sortorder parameters.

Reference

http://secunia.com/advisories/28188 http://www.osvdb.org/39497 http://www.securityfocus.com/archive/1/485408/100/0/threaded http://www.securityfocus.com/bid/26973 http://www.vupen.com/english/advisories/2007/4300 https://exchange.xforce.ibmcloud.com/vulnerabilities/39174