medium4.6Public exploit code
CVE-2001-1472
SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpBB 1.4 - SQL Query Manipulation2001-08-03 · webapps · php · Verified
Impact
SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative access via the viewemail parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpbb Group | Phpbb | Versions 1.4.0, 1.4.1 |
References
- NVD record
- CVE.org record
- http://www.kb.cert.org/vuls/id/314347
- http://www.securityfocus.com/archive/1/201715
- http://www.securityfocus.com/bid/3142
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6944
- http://www.kb.cert.org/vuls/id/314347
- http://www.securityfocus.com/archive/1/201715
- http://www.securityfocus.com/bid/3142
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6944