medium5.0Public exploit code

CVE-2003-0486

SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

phpBB 2.0.5 - SQL Injection Password Disclosure2003-06-20 · webapps · php · Verified

Impact

SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter.

Affected products

Vendor	Product	Affected versions
Phpbb Group	Phpbb	through 2.0.5

References