EDB-23821

functional

phpBB 1.x/2.0.x - 'search.php?search_results' SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor pokleyzzpublished 2004-01-04catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2004-2350UShigh7.5Exploit
SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the search_results parameter.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan