high7.5Public exploit code
CVE-2009-3208
Multiple SQL injection vulnerabilities in phpfreeBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to permalink.php and …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpfreeBB 1.0 - Blind SQL Injection2009-08-18 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in phpfreeBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to permalink.php and (2) year parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Prakashatma Mishra | Phpfreebb | Version 1.0 |