CVE-2003-1216

Phpbb - SQL Injection

Title source: rule

Description

SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the search_id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by RusH · perlwebappsphp

https://www.exploit-db.com/exploits/137

View Code ZIP pw:eip

References (6)

[Patch, Vendor Advisory] http://www.phpbb.com/phpBB/viewtopic.php?t=153818

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/13867

[Mailing List] http://marc.info/?l=bugtraq&m=107196735102970&w=2

[Exploit, Patch, Vendor Advisory] http://www.securityfocus.com/bid/9122

[Mailing List] http://marc.info/?l=bugtraq&m=107005608726609&w=2

[Mailing List] http://marc.info/?l=bugtraq&m=106997132425576&w=2

Scores

EPSS 0.0313

EPSS Percentile 86.9%

Details

Status published

Products (19)

phpbb_group/phpbb 1.0.0

phpbb_group/phpbb 1.2.0

phpbb_group/phpbb 1.2.1

phpbb_group/phpbb 1.4.0

phpbb_group/phpbb 1.4.1

phpbb_group/phpbb 1.4.2

phpbb_group/phpbb 1.4.4

phpbb_group/phpbb 2.0.0

phpbb_group/phpbb 2.0.1

phpbb_group/phpbb 2.0.2

... and 9 more

Published Nov 27, 2003

Tracked Since Feb 18, 2026