Unscored CVE-2007-2858 EUVD-2007-2850GHSA-rcpp-55w2-w526

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrator…

Published May 24, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field.

References

phpbb-iptracking-sql-injection(34384) vdb-entry
37534 vdb-entry
20070520 SQL-Injection in IP-TRACKING Mod for phpBB2.0.x mailing-list
2731 third-party-advisory