CVE-2005-0661

HIGH · CVSS 7.5 EPSS 1.11%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-05-02 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2005-0661

Severity

HIGH

CVSS

7.5

EPSS

1.11%

Original Filing — NVD Description

SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) lastvisit cookie.