CVE-2003-1244: SQL Injection
Published Dec 31, 2003
·Updated
SQL injection vulnerability in pageheader.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force user passwords and possibly gain unauthorized access to forums via the forumid parameter to index.php.
Affected Software
3 affected components
Phpbb Group Phpbb=2.0.1
Phpbb Group Phpbb=2.0.2
Phpbb Group Phpbb=2.0.0
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityWeaknessAffected Software
Nov 16, 2005
CVE Published
via MITRE·12:37 PM
Data Sourced
via MITRE·12:37 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1244?
CVE-2003-1244 is considered to have a high severity due to the potential for unauthorized access through SQL injection.
2
How do I fix CVE-2003-1244?
To fix CVE-2003-1244, upgrade phpBB to the latest version that is not affected by this vulnerability.
3
Which versions of phpBB are impacted by CVE-2003-1244?
CVE-2003-1244 affects phpBB versions 2.0.0, 2.0.1, and 2.0.2.
4
What kind of attack can exploit CVE-2003-1244?
CVE-2003-1244 can be exploited through SQL injection to brute force user passwords.
5
Can CVE-2003-1244 lead to data breaches?
Yes, exploiting CVE-2003-1244 could potentially allow attackers to gain unauthorized access, leading to data breaches.