CVE-2005-1196

phpBB - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote attackers to obtain sensitive information and execute SQL commands via the cat parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by [email protected] · textwebappsphp
https://www.exploit-db.com/exploits/25451

References (1)

Core 1
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111384185116335&w=2

Scores

EPSS 0.0033
EPSS Percentile 56.3%

Details

Status published
Products (1)
phpbb_group/phpbb
Published May 02, 2005
Tracked Since Feb 18, 2026