phpBB Viewtopic.PHP SQL Injection Vulnerability
BID:7979
Info
phpBB Viewtopic.PHP SQL Injection Vulnerability
| Bugtraq ID: | 7979 |
| Class: | Input Validation Error |
| CVE: |
CVE-2003-0486 CVE-2003-0486 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 19 2003 12:00AM |
| Updated: | Mar 19 2015 09:09AM |
| Credit: | Discovery of this vulnerability has been credited to Rick <[email protected]>. |
| Vulnerable: |
phpBB Group phpBB 2.0.5 phpBB Group phpBB 2.0.4 |
| Not Vulnerable: | |
Discussion
phpBB Viewtopic.PHP SQL Injection Vulnerability
An SQL injection vulnerability has been reported for phpBB systems that may result in the disclosure of user password hashes; other attacks may also be possible.
phpBB, in some cases, does not sufficiently sanitize user-supplied input which is used when constructing SQL queries to execute on the underlying database. As a result, it is possible to manipulate SQL queries. This may allow a remote attacker to modify query logic or potentially corrupt the database.
An SQL injection vulnerability has been reported for phpBB systems that may result in the disclosure of user password hashes; other attacks may also be possible.
phpBB, in some cases, does not sufficiently sanitize user-supplied input which is used when constructing SQL queries to execute on the underlying database. As a result, it is possible to manipulate SQL queries. This may allow a remote attacker to modify query logic or potentially corrupt the database.
Exploit / POC
phpBB Viewtopic.PHP SQL Injection Vulnerability
The following proof of concept has been provided:
The following proof of concept has been provided:
References
phpBB Viewtopic.PHP SQL Injection Vulnerability
References:
References: