Description
SQL injection vulnerability in groupcp.php for phpBB 2.0.6 and earlier allows group moderators to perform unauthorized activities via the sql_in parameter.
References
- 20031229 SQL Injection in phpBB's groupcp.php mailing-list
- 9314 vdb-entry
- http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943
- phpbb-groupcp-sql-injection(14096) vdb-entry