CVE-2005-1170

phpBB - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by tom cruise · textwebappsphp
https://www.exploit-db.com/exploits/25432

References (1)

Core 1
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111367077709726&w=2

Scores

EPSS 0.0033
EPSS Percentile 56.3%

Details

Status published
Products (1)
datenbank_module/datenbank_module
Published May 02, 2005
Tracked Since Feb 18, 2026