← Database

CVE-2006-6237

HIGH CVSS: 7.5 Published: 2006-12-03 Modified: 2026-06-16

Description

SQL injection vulnerability in the decode_cookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threadvisit Cookie parameter.

Affected Platforms

Woltlab Burning Board Lite

Weakness Type

NVD-CWE-Other

References