CVE-2006-4367 SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote attackers to execute arbitrary SQL commands via the start parameter.
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote attackers to execute arbitrary SQL commands via the start parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| all topics hack | <= 1.5.0 | No fix listed |
References
- 19682 exploit vdb-entry
- phpbb-alltopics-sql-injection(28538) vdb-entry
- 2248 exploit