CVE-2003-1216: SQL Injection
Published Nov 27, 2003
·Updated
SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the searchid parameter.
Affected Software
19 affected components
Phpbb Group Phpbb=2.0.5
Phpbb Group Phpbb=1.2.1
Phpbb Group Phpbb=1.4.1
Phpbb Group Phpbb=1.4.4
Phpbb Group Phpbb=2.0.1
Phpbb Group Phpbb=2.0.3
Phpbb Group Phpbb=2.0_rc2
Phpbb Group Phpbb=1.4.2
Phpbb Group Phpbb=2.0_rc1
Phpbb Group Phpbb=1.4.0
Phpbb Group Phpbb=2.0.4
Phpbb Group Phpbb=2.0.6
Phpbb Group Phpbb=2.0_beta1
Phpbb Group Phpbb=1.2.0
Phpbb Group Phpbb=2.0.2
Phpbb Group Phpbb=2.0_rc3
Phpbb Group Phpbb=2.0_rc4
Phpbb Group Phpbb=1.0.0
Phpbb Group Phpbb=2.0.0
Remediation
Patch Available
Patch Available
Event History
Nov 27, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
May 27, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1216?
CVE-2003-1216 is classified as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2003-1216?
To fix CVE-2003-1216, upgrade phpBB to version 2.0.7 or later, which resolves the SQL injection vulnerability.
3
What versions of phpBB are affected by CVE-2003-1216?
CVE-2003-1216 affects phpBB versions 2.0.6 and earlier, including multiple 1.x and 2.x versions.
4
What is the impact of exploiting CVE-2003-1216?
Exploiting CVE-2003-1216 can lead to unauthorized access to the database and potential privilege escalation for attackers.
5
How can I determine if my phpBB installation is vulnerable to CVE-2003-1216?
Check if your phpBB version is 2.0.6 or earlier, which indicates a vulnerability to CVE-2003-1216.