CVE-2003-1216

SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the search_id parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.77% chance of exploitation in the next 30 days, 77th percentile

Published

2005-05-27

Updated

2024-08-08

Proof-of-concept exploits (2)

• http://marc.info/?l=bugtraq&m=107196735102970&w=2
• http://marc.info/?l=bugtraq&m=107005608726609&w=2

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/137

References

• CVE Record
• NVD entry

Related

• CVE-2003-1213
• CVE-2003-1219
• CVE-2003-1210
• CVE-2003-1227
• CVE-2003-1207
• CVE-2003-1228