PT-2007-7112 · Phpbb · Phpbb Garage

Maku234 · Published 2007-12-04 · Updated 2017-09-29 · CVE-2007-6223

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBB Garage version 1.2.0 Beta3

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the make id parameter in a search action in browse mode, specifically targeting the garage.php file.

Recommendations For phpBB Garage version 1.2.0 Beta3, avoid using the make id parameter in the search action in browse mode until a fix is available. As a temporary workaround, consider restricting access to the garage.php file to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2007-6223

Affected Products

Phpbb Garage

References · 4

• 🔥 https://exploit-db.com/exploits/4686 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6223 · Security Note
• http://securityfocus.com/bid/26683 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38832 · Note