7.5
CVSSv2

CVE-2003-1216

Published: 27/11/2003 Updated: 11/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in search.php for phpBB 2.0.6 and previous versions allows remote malicious users to execute arbitrary SQL and gain privileges via the search_id parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

phpbb group phpbb 1.4.0

phpbb group phpbb 1.4.1

phpbb group phpbb 2.0.4

phpbb group phpbb 2.0.5

phpbb group phpbb 1.4.2

phpbb group phpbb 1.4.4

phpbb group phpbb 2.0.6

phpbb group phpbb 2.0_beta1

phpbb group phpbb 1.2.0

phpbb group phpbb 1.2.1

phpbb group phpbb 2.0.2

phpbb group phpbb 2.0.3

phpbb group phpbb 2.0_rc3

phpbb group phpbb 2.0_rc4

phpbb group phpbb 1.0.0

phpbb group phpbb 2.0.0

phpbb group phpbb 2.0.1

phpbb group phpbb 2.0_rc1

phpbb group phpbb 2.0_rc2

Exploits

#!/usr/bin/perl -w use IO::Socket; ## PROOF-OF-CONCEPT ## * work only with mysql ver > 40 ## * work only with post #1 ## ## Example: ## C:\>r57phpbb-pocpl 127001 phpBB2 2 2 ## [~] prepare to connect ## [+] connected ## [~] prepare to send data ## [+] OK ## [~] wait for response ## [+] MD5 Hash f ...