CVE-2005-1378 SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbitrary SQL commands via the p parameter, which is used in the $post_id variable, an...
HighCVSS 7.5
EPSS 1.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbitrary SQL commands via the p parameter, which is used in the $post_id variable, and other attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oxpus phpbb personal notes module | <= 1.4.6 | No fix listed |
References
- 20050427 phpBB Notes Mod SQL Injection Vulnerability mailing-list
- 15154 third-party-advisory
- 1013827 exploit vdb-entry
- www.gulftech.org
- 15899 exploit vdb-entry
- 13417 exploit patch vdb-entry
- ADV-2005-0416 vdb-entry
- phpbb-notes-module-sql-injection(20303) vdb-entry