Vulnerabilities > CVE-2005-1378 - SQL Injection vulnerability in Notes Module for PHPBB
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbitrary SQL commands via the p parameter, which is used in the $post_id variable, and other attack vectors.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | Notes Module for PHPBB SQL Injection Vulnerability. CVE-2005-1378. Webapps exploit for php platform |
| id | EDB-ID:25558 |
| last seen | 2016-02-03 |
| modified | 2005-04-28 |
| published | 2005-04-28 |
| reporter | James Bercegay |
| source | https://www.exploit-db.com/download/25558/ |
| title | Notes Module for PHPBB SQL Injection Vulnerability |
References
- http://marc.info/?l=bugtraq&m=111471606518372&w=2
- http://secunia.com/advisories/15154/
- http://securitytracker.com/id?1013827
- http://www.gulftech.org/?node=research&article_id=00070-04272005
- http://www.osvdb.org/15899
- http://www.securityfocus.com/bid/13417
- http://www.vupen.com/english/advisories/2005/0416
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20303