CVEvulnerability
CVE-2006-4367
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-08-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote attackers to execute arbitrary SQL commands via the start parameter.
Affected configurations
• all topics all topics hack (<= 1.5.0)
References
- http://www.securityfocus.com/bid/19682 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28538 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/2248 www.exploit-db.com
- http://www.securityfocus.com/bid/19682 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28538 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/2248 www.exploit-db.com