NVD

Id
12870  
Name
CVE-2010-1338  
Description
SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute arbitrary SQL commands via the userid parameter in a modboard action.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-04-09  
Modified Date
2010-04-12  
Seq
2010-1338  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
70933 12870 CVE-2010-1338 http://4004securityproject.wordpress.com/2010/03/22/woltlab-burning-board-teamsite-hack-v3-0-ts_other-php-sql-injection-exploit-2/  View
70934 12870 CVE-2010-1338 http://445544.44.ohost.de/worldlabburningboardadon2python-1.txt  View
70935 12870 CVE-2010-1338 http://packetstormsecurity.org/1003-exploits/woltlabb-sql.txt  View
70936 12870 CVE-2010-1338 11824  View
70937 12870 CVE-2010-1338 38870  View
70938 12870 CVE-2010-1338 wbb-teamsitehack-userid-sql-injection(57066)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39598 JVNDB-2010-005383 WoltLab Burning Board 用の Teamsite Hack プラグインにおける SQL インジェクションの脆弱性 WoltLab Burning Board 用の Teamsite Hack プラグインの ts_other.php には、SQL インジェクションの脆弱性が存在します。 CVE-2010-1338 43918 CVE-2010-1338 12870 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005383.html 2010-04-09 2012-12-20 View