7.5
CVSSv2

CVE-2005-1196

Published: 02/05/2005 Updated: 18/10/2016
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote malicious users to obtain sensitive information and execute SQL commands via the cat parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

phpbb group phpbb

Exploits

source: wwwsecurityfocuscom/bid/13219/info Knowledge Base Module is affected by an SQL injection vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query Successful exploitation could result in a compromise of the application, disclosure or modification of ...