CVE-2007-5688 Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Board (IPB or IP.Board), allow remote attackers to exe...
HighCVSS 7.5
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Board (IPB or IP.Board), allow remote attackers to execute arbitrary SQL commands via the (1) go and (2) cat parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| invision power services invision power board | All versions | No fix listed |
| phpbb/phpbb | All versions | No fix listed |
| sebflipper multi-forums module | = 1.3.3 | No fix listed |
References
- 27406 third-party-advisory vendor-advisory
- www.inj3ct-it.org exploit
- 20071025 Multi Host Forum Pro phpbb & ipb Multiple Sql Injection mailing-list
- 26213 exploit vdb-entry
- phpbb-multiforums-sql-injection(37461) vdb-entry