EDB-22182

functional

phpBB 2.0.3 - 'privmsg.php' SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor Ulf Harnhammarpublished 2003-01-17catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2003-1530UShigh7.5Exploit
SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the mark[] parameter.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan