Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 03/08/2001 Updated: 11/07/2017

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

VMScore: 465

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative access via the viewemail parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpbb group phpbb 1.4.0
phpbb group phpbb 1.4.1

source: wwwsecurityfocuscom/bid/3142/info phpBB is free, open-source, easy-to-use web forums software An issue exists in phpBB which allows a remote attacker to manipulate SQL queries in such a way as to gain an administrative account with the service This problem is due to improper validation of user-supplied input by certain variabl ...

NVD-CWE-Other http://www.securityfocus.com/archive/1/201715 http://www.kb.cert.org/vuls/id/314347 http://www.securityfocus.com/bid/3142 https://exchange.xforce.ibmcloud.com/vulnerabilities/6944 https://nvd.nist.gov https://www.exploit-db.com/exploits/21046/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2001-1472

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect