CVE-2003-1530

Phpbb - SQL Injection

Title source: rule

Description

SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the mark[] parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Ulf Harnhammar · perlwebappsphp

https://www.exploit-db.com/exploits/22182

View Code ZIP pw:eip

References (5)

[Exploit, Patch] http://www.securityfocus.com/bid/6634

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/307212/30/26300/threaded

[Vendor Advisory] http://secunia.com/advisories/7887/

[Third Party Advisory] http://archives.neohapsis.com/archives/bugtraq/2003-01/0125.html

[Third Party Advisory, VDB Entry] http://www.osvdb.org/4277

Scores

EPSS 0.0055

EPSS Percentile 68.0%

Details

CWE

CWE-89

Status published

Products (1)

phpbb/phpbb 2.0.3

Published Dec 31, 2003

Tracked Since Feb 18, 2026