critical10.0Public exploit code
CVE-2002-2176
SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the user_level parameter in the User Profile page.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpBB2 Gender Mod 1.1.3 - SQL Injection2002-07-29 · webapps · php · Verified
Impact
SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the user_level parameter in the User Profile page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpbb Group | Phpbb | Versions 2.0.0, 2.0.1 |