high7.5Public exploit code
CVE-2003-1244
SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force user passwords and possibly gain unauthoriz…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHPBB2 - 'Page_Header.php' SQL Injection2003-02-19 · webapps · php · Verified
Impact
SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force user passwords and possibly gain unauthorized access to forums via the forum_id parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpbb Group | Phpbb | Versions 2.0.0, 2.0.1, 2.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0245.html
- http://www.iss.net/security_center/static/11376.php
- http://www.securityfocus.com/bid/6888
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0245.html
- http://www.iss.net/security_center/static/11376.php
- http://www.securityfocus.com/bid/6888