WoltLab Burning Board Verify_email Function SQL Injection Vulnerability

Bugtraq ID:	13643
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 16 2005 12:00AM
Updated:	May 16 2005 12:00AM
Credit:	Discovery is credited to James Bercegay of the GulfTech Security Research Team.
Vulnerable:	Woltlab Burning Board 2.3.1 Woltlab Burning Board 2.0 RC2 Woltlab Burning Board 2.0 RC1 Woltlab Burning Board 2.0 beta 5 Woltlab Burning Board 2.0 beta 4 Woltlab Burning Board 2.0 beta 3
Not Vulnerable:

WoltLab Burning Board Verify_email Function SQL Injection Vulnerability

WoltLab Burning Board is prone to an SQL injection vulnerability.

This issue affects the 'verify_email()' function.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

WoltLab Burning Board Verify_email Function SQL Injection Vulnerability

No exploit is required.

WoltLab Burning Board Verify_email Function SQL Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

WoltLab Burning Board Verify_email Function SQL Injection Vulnerability

References:

• CityForFree Product Page (CityForFree)
  
• Woltlab Burning Board SQL Injection Vulnerability (GulfTech Security Research )