CVE-2010-1338 - Vulnerability Details - OpenCVE

SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute arbitrary SQL commands via the userid parameter in a modboard action.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Robertotto	Teamsite Hack Plugin
Woltlab	Burning Board

Configuration 1 [-]

AND

cpe:2.3:a:robertotto:teamsite_hack_plugin:*:*:*:*:*:*:*:*

cpe:2.3:a:woltlab:burning_board:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://4004securityproject.wordpress.com/2010/03/22/woltlab-burning-board-teamsite-hack-v3-0-ts_other-php-sql-injection-exploit-2/
http://445544.44.ohost.de/worldlabburningboardadon2python-1.txt
http://osvdb.org/63126
http://packetstormsecurity.org/1003-exploits/woltlabb-sql.txt
http://secunia.com/advisories/39009
http://www.exploit-db.com/exploits/11824
http://www.securityfocus.com/bid/38870
https://exchange.xforce.ibmcloud.com/vulnerabilities/57066

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2010-04-09T18:00:00

Updated: 2024-08-07T01:21:18.614Z

Reserved: 2010-04-09T00:00:00

Link: CVE-2010-1338

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2010-04-09T18:30:00.430

Modified: 2025-04-11T00:51:21.963

Link: CVE-2010-1338

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-03-21T00:00:00", "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute arbitrary SQL commands via the userid parameter in a modboard action."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.org/1003-exploits/woltlabb-sql.txt"}, {"name": "63126", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/63126"}, {"name": "38870", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/38870"}, {"name": "11824", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "http://www.exploit-db.com/exploits/11824"}, {"tags": ["x_refsource_MISC"], "url": "http://4004securityproject.wordpress.com/2010/03/22/woltlab-burning-board-teamsite-hack-v3-0-ts_other-php-sql-injection-exploit-2/"}, {"name": "wbb-teamsitehack-userid-sql-injection(57066)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57066"}, {"name": "39009", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/39009"}, {"tags": ["x_refsource_MISC"], "url": "http://445544.44.ohost.de/worldlabburningboardadon2python-1.txt"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2010-1338", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute arbitrary SQL commands via the userid parameter in a modboard action."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://packetstormsecurity.org/1003-exploits/woltlabb-sql.txt", "refsource": "MISC", "url": "http://packetstormsecurity.org/1003-exploits/woltlabb-sql.txt"}, {"name": "63126", "refsource": "OSVDB", "url": "http://osvdb.org/63126"}, {"name": "38870", "refsource": "BID", "url": "http://www.securityfocus.com/bid/38870"}, {"name": "11824", "refsource": "EXPLOIT-DB", "url": "http://www.exploit-db.com/exploits/11824"}, {"name": "http://4004securityproject.wordpress.com/2010/03/22/woltlab-burning-board-teamsite-hack-v3-0-ts_other-php-sql-injection-exploit-2/", "refsource": "MISC", "url": "http://4004securityproject.wordpress.com/2010/03/22/woltlab-burning-board-teamsite-hack-v3-0-ts_other-php-sql-injection-exploit-2/"}, {"name": "wbb-teamsitehack-userid-sql-injection(57066)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57066"}, {"name": "39009", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/39009"}, {"name": "http://445544.44.ohost.de/worldlabburningboardadon2python-1.txt", "refsource": "MISC", "url": "http://445544.44.ohost.de/worldlabburningboardadon2python-1.txt"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T01:21:18.614Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://packetstormsecurity.org/1003-exploits/woltlabb-sql.txt"}, {"name": "63126", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/63126"}, {"name": "38870", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/38870"}, {"name": "11824", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "http://www.exploit-db.com/exploits/11824"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://4004securityproject.wordpress.com/2010/03/22/woltlab-burning-board-teamsite-hack-v3-0-ts_other-php-sql-injection-exploit-2/"}, {"name": "wbb-teamsitehack-userid-sql-injection(57066)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57066"}, {"name": "39009", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/39009"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://445544.44.ohost.de/worldlabburningboardadon2python-1.txt"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2010-1338", "datePublished": "2010-04-09T18:00:00", "dateReserved": "2010-04-09T00:00:00", "dateUpdated": "2024-08-07T01:21:18.614Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:robertotto:teamsite_hack_plugin:*:*:*:*:*:*:*:*", "matchCriteriaId": "25B08972-7D00-4E9A-8150-F1055F79FDA5", "versionEndIncluding": "3.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:woltlab:burning_board:*:*:*:*:*:*:*:*", "matchCriteriaId": "EC273A0A-B0E7-4C9D-9AE5-85542E9A205B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute arbitrary SQL commands via the userid parameter in a modboard action."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n SQL en ts_other.php en el plugin TeamSite Hack v3.0 y anteriores de WoltLab Burning Board permite a atacantes remotos ejecutar comandos SQL a trav\u00e9s del par\u00e1metro userid en una acci\u00f3n modboard."}], "id": "CVE-2010-1338", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2010-04-09T18:30:00.430", "references": [{"source": "cve@mitre.org", "url": "http://4004securityproject.wordpress.com/2010/03/22/woltlab-burning-board-teamsite-hack-v3-0-ts_other-php-sql-injection-exploit-2/"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://445544.44.ohost.de/worldlabburningboardadon2python-1.txt"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/63126"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://packetstormsecurity.org/1003-exploits/woltlabb-sql.txt"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/39009"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.exploit-db.com/exploits/11824"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/38870"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57066"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://4004securityproject.wordpress.com/2010/03/22/woltlab-burning-board-teamsite-hack-v3-0-ts_other-php-sql-injection-exploit-2/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://445544.44.ohost.de/worldlabburningboardadon2python-1.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/63126"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://packetstormsecurity.org/1003-exploits/woltlabb-sql.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/39009"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.exploit-db.com/exploits/11824"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/38870"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57066"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "nvd@nist.gov", "type": "Primary"}]}