PT-2005-2212 · Phpbb · Phpbb Knowledge Base Module

[R] + 1 · Publicado 2005-04-21 · Atualizado 2016-10-18 · CVE-2005-1196

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBB Knowledge Base module (affected versions not specified)

Description The issue allows remote attackers to obtain sensitive information and execute SQL commands. This is achieved by exploiting a SQL injection vulnerability in the kb.php file of the Knowledge Base module. The vulnerability is specifically tied to the cat parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-1196

Produtos afetados

Phpbb Knowledge Base Module

Referências · 3

• 🔥 https://exploit-db.com/exploits/25451 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1196 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=111384185116335&w=2 · Nota