[VIM] Re: Woltlab Burning Board SQL Injection Vulnerability (fwd)

[security curmudgeon]

---------- Forwarded message ----------
From: GulfTech Security Research <security at gulftech.org>
To: security curmudgeon <jericho at attrition.org>
Date: Mon, 16 May 2005 16:35:53 -0500
Subject: Re: Woltlab Burning Board SQL Injection Vulnerability

I don't think it is, because I did not report my finding until 5/1/2005 and as 
of yesterday the available Burning Board download was still vulnerable. I hope 
this helps.

James

GulfTech Research And Development
P.O. Box 691 Gulfport, MS 39501
http://www.gulftech.org/?node=webappsec



security curmudgeon wrote:

> Hey James,
> 
> Do you know if this is the issue as described at
> http://www.woltlab.de/news/399_en.php?
> 
> Thanks!
> 
> Brian
> OSVDB.org
> 
> 
>