phpBB2 privmsg.php SQL Injection Vulnerability

Bugtraq ID:	6634
Class:	Input Validation Error
CVE:	CVE-2003-1530 CVE-2003-1530 CVE-2003-1530 CVE-2003-1530 CVE-2003-1530 CVE-2003-1530 CVE-2003-1530 CVE-2003-1530 CVE-2003-1530 CVE-2003-1530 CVE-2003-1530
Remote:	Yes
Local:	No
Published:	Jan 17 2003 12:00AM
Updated:	Mar 19 2015 08:43AM
Credit:	Discovery of this vulnerability credited to Ulf Harnhammar <[email protected]>.
Vulnerable:	phpBB Group phpBB 2.0.3
Not Vulnerable:	phpBB Group phpBB 2.0.4

phpBB2 privmsg.php SQL Injection Vulnerability

A SQL injection vulnerability has been reported for phpBB2 systems that may result in the deletion of all private messages.

phpBB2, in some cases, does not sufficiently sanitize user-supplied input which is used when constructing SQL queries to execute on the underlying database. As a result, it is possible to manipulate SQL queries. This may allow a remote attacker to modify query logic or potentially corrupt the database.

A remote attacker can exploit this vulnerability by manipulating URI parameters to cause the text of all private messages to be deleted.

phpBB2 privmsg.php SQL Injection Vulnerability

The following exploit was provided:

• /data/vulnerabilities/exploits/phpbb-exploit.pl

phpBB2 privmsg.php SQL Injection Vulnerability

Solution:
Fixes are available:


phpBB Group phpBB 2.0.3

• phpBB Group phpBB 2.0.4
  http://www.phpbb.com/downloads.php

phpBB2 privmsg.php SQL Injection Vulnerability

References:

• phpBB Homepage (phpBB)
  
• phpBB SQL Injection vulnerability (Ulf Harnhammar )