SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the mark[] parameter.
References
Configurations
History
20 Nov 2024, 23:47
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2003-01/0125.html - | |
References | () http://secunia.com/advisories/7887/ - Vendor Advisory | |
References | () http://www.osvdb.org/4277 - | |
References | () http://www.securityfocus.com/archive/1/307212/30/26300/threaded - | |
References | () http://www.securityfocus.com/bid/6634 - Exploit, Patch |
Information
Published : 2003-12-31 05:00
Updated : 2024-11-20 23:47
NVD link : CVE-2003-1530
Mitre link : CVE-2003-1530
CVE.ORG link : CVE-2003-1530
JSON object : View
Products Affected
phpbb
- phpbb
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')