PT-2005-2212 · Phpbb · Phpbb Knowledge Base Module

[R] + 1 · Published 2005-04-21 · Updated 2016-10-18 · CVE-2005-1196

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBB Knowledge Base module (affected versions not specified)

Description The issue allows remote attackers to obtain sensitive information and execute SQL commands. This is achieved by exploiting a SQL injection vulnerability in the kb.php file of the Knowledge Base module. The vulnerability is specifically tied to the cat parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-1196

Affected Products

Phpbb Knowledge Base Module

References · 3

• 🔥 https://exploit-db.com/exploits/25451 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1196 · Security Note
• http://marc.info/?l=bugtraq&m=111384185116335&w=2 · Note