PT-2005-4327 · Phpbb · Phpbb

Published 2005-12-22 · Updated 2008-09-05 · CVE-2005-3536

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBB versions prior to 2.0.18

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by injecting malicious SQL code into the topic type, potentially leading to unauthorized data access or modification.

Recommendations For versions prior to 2.0.18, update to version 2.0.18 or later to resolve the issue. As a temporary workaround, consider restricting access to the topic type feature until a patch is applied.

Fix

Related Identifiers

CVE-2005-3536

DSA-925-1

Affected Products

Phpbb

References · 6

• http://debian.org/security/2005/dsa-925 · Vendor Advisory
• http://securityfocus.com/bid/15246 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-3536 · Security Note
• http://secunia.com/advisories/18098 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3536 · Note
• http://osvdb.org/22270 · Note