BID:10722

PHPBB Multiple Unspecified SQL Injection Vulnerabilities

Info

PHPBB Multiple Unspecified SQL Injection Vulnerabilities

Bugtraq ID:	10722
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 13 2004 12:00AM
Updated:	Jul 13 2004 12:00AM
Credit:	The vendor acknowledges Xore and Bartlomiej Korupczynski for discovery of these vulnerabilities.
Vulnerable:	phpBB Group phpBB 2.0.8 a phpBB Group phpBB 2.0.8 phpBB Group phpBB 2.0.7 a phpBB Group phpBB 2.0.7 phpBB Group phpBB 2.0.6 d phpBB Group phpBB 2.0.6 c phpBB Group phpBB 2.0.6 phpBB Group phpBB 2.0.5 phpBB Group phpBB 2.0.4 phpBB Group phpBB 2.0.3 phpBB Group phpBB 2.0.2 phpBB Group phpBB 2.0.1 phpBB Group phpBB 2.0 .0

Not Vulnerable:	phpBB Group phpBB 2.0.9

Discussion

PHPBB Multiple Unspecified SQL Injection Vulnerabilities

It is reported that phpBB contains multiple unspecified SQL injection vulnerabilities.

One vulnerability is reported to exist in 'admin_board.php'. The other pertains to improper characters in the session id variable.

These issues are due to a failure of the application to properly sanitize user-supplied URI parameters before using them to construct SQL queries to be issued to the underlying database.

Version 2.0.9 has been released addressing these, and other issues. This BID will be updated when further information is known.

Exploit / POC

PHPBB Multiple Unspecified SQL Injection Vulnerabilities

No exploit is required.

Solution / Fix

PHPBB Multiple Unspecified SQL Injection Vulnerabilities

Solution:
The vendor has released version 2.0.9 of phpBB that addresses these and other issues.

phpBB Group phpBB 2.0 .0