CVE:CVE-2005-0661
CNNVD:CNNVD-200505-804
Woltlab Burning Board 2.0.3至2.3.0版本的session.php中的getwbbuserdata函数存在SQL注入漏洞，远程攻击者可以通过(1)userid或(2)lastvisit cookie执行任意SQL命令。
solution:Upgrade woltlab burning_board to a higher version than 2.0.3,2.1.5,2.2.1,2.3.0,and avoid the version 2.0.3,2.1.5,2.2.1,2.3.0