CVE-2006-3256

CVE-2006-3256 describes a critical SQL injection vulnerability in Woltlab Burning Board (WBB) version 2.3.1, specifically within the report.php script. An unauthenticated remote attacker can exploit this flaw by manipulating the 'postid' parameter to execute arbitrary SQL commands, potentially leading to unauthorized data access, modification, or deletion. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector and low attack complexity, allowing for partial compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or currently active on any hot lists, public exploit code exists on ExploitDB, indicating that exploitation is feasible, though there is no evidence of widespread active exploitation or significant community discussion.