BID:10740

PHPBB Linked Avatar SQL Injection Vulnerability

Info

PHPBB Linked Avatar SQL Injection Vulnerability

Bugtraq ID:	10740
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 16 2004 12:00AM
Updated:	Mar 19 2015 09:24AM
Credit:	The individual responsible for the discovery of this issue is currently unknown; the vendor disclosed this issue.
Vulnerable:	phpBB Group phpBB 2.0.8 a phpBB Group phpBB 2.0.8 phpBB Group phpBB 2.0.7 a phpBB Group phpBB 2.0.7 phpBB Group phpBB 2.0.6 d phpBB Group phpBB 2.0.6 c phpBB Group phpBB 2.0.6 phpBB Group phpBB 2.0.5 phpBB Group phpBB 2.0.4 phpBB Group phpBB 2.0.3 phpBB Group phpBB 2.0.2 phpBB Group phpBB 2.0.1 phpBB Group phpBB 2.0 .0

Not Vulnerable:	phpBB Group phpBB 2.0.9

Discussion

PHPBB Linked Avatar SQL Injection Vulnerability

Reportedly phpBB is affected by a linked avatar SQL injection vulnerability; This issue is due to a failure of the application to properly sanitize user-supplied input before including it in an SQL query.

Although unconfirmed, this issue may allow a remote attacker to manipulate query logic, potentially leading to access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.

Exploit / POC

PHPBB Linked Avatar SQL Injection Vulnerability

No exploit is required to leverage this issue.

Solution / Fix

PHPBB Linked Avatar SQL Injection Vulnerability

Solution:
The vendor has released version 2.0.9 of phpBB that addresses these and other issues.

phpBB Group phpBB 2.0 .0