CVE:CVE-2002-1505
CNNVD:CNNVD-200304-022
WoltLab Burning Board (wBB) 2.0 RC 1及其之前版本的board.php存在SQL漏洞。远程攻击者借助boardid参数修改数据库且可能提升特权。
solution:Upgrade woltlab burning_board to a higher version than 2.0_rc1,2.0_beta_3,2.0_beta_4,2.0_beta_5,and avoid the version (,2.0_rc1],2.0_beta_3,2.0_beta_4,2.0_beta_5