CVE-2003-1215: SQL Injection
SQL injection vulnerability in groupcp.php for phpBB 2.0.6 and earlier allows group moderators to perform unauthorized activities via the sqlin parameter.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1215?
CVE-2003-1215 is considered to have a medium severity level due to its potential to allow unauthorized actions by group moderators.
How do I fix CVE-2003-1215?
To fix CVE-2003-1215, you should upgrade phpBB to version 2.0.7 or later, where this vulnerability has been addressed.
What versions of phpBB are affected by CVE-2003-1215?
CVE-2003-1215 affects phpBB versions 2.0.6 and earlier, as well as several versions of phpBB 1.x.
What kind of attack does CVE-2003-1215 enable?
CVE-2003-1215 enables SQL injection attacks that allow group moderators to perform unauthorized database actions.
Who is primarily affected by CVE-2003-1215?
The primary affected parties are users and administrators of phpBB versions 2.0.6 and earlier who have group moderators with malicious intent.