Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Maku234

#37773de 53,638
7.5CVSS total
Vulnerabilidades · 1
PT-2007-7112
7.5
2007-12-04
Phpbb · Phpbb Garage · CVE-2007-6223
**Name of the Vulnerable Software and Affected Versions** phpBB Garage version 1.2.0 Beta3 **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `make id` parameter in a search action in browse mode, specifically targeting the garage.php file. **Recommendations** For phpBB Garage version 1.2.0 Beta3, avoid using the `make id` parameter in the search action in browse mode until a fix is available. As a temporary workaround, consider restricting access to the garage.php file to minimize the risk of exploitation.