CVE-2005-1114: SQL Injection

Published Apr 16, 2005

Updated

Multiple SQL injection vulnerabilities in albumsearch.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the (1) mode or (2) search parameters.

Affected Software

19 affected components

Phpbb Group Phpbb=2.0.0

Phpbb Group Phpbb=2.0.1

Phpbb Group Phpbb=2.0.2

Phpbb Group Phpbb=2.0.3

Phpbb Group Phpbb=2.0.4

Phpbb Group Phpbb=2.0.5

Phpbb Group Phpbb=2.0.6

Phpbb Group Phpbb=2.0.6c

Phpbb Group Phpbb=2.0.6d

Phpbb Group Phpbb=2.0.7

Phpbb Group Phpbb=2.0.7a

Phpbb Group Phpbb=2.0.8

Phpbb Group Phpbb=2.0.8a

Phpbb Group Phpbb=2.0.9

Phpbb Group Phpbb=2.0.10

Phpbb Group Phpbb=2.0.11

Phpbb Group Phpbb=2.0.12

Phpbb Group Phpbb=2.0.13

Smartor Photo Album=2.0.53

Event History

Apr 16, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1114?

CVE-2005-1114 has a moderate severity rating due to its potential for SQL injection attacks that can lead to arbitrary code execution.

How do I fix CVE-2005-1114?

Fix CVE-2005-1114 by upgrading to a patched version of Photo Album or applying any available security patches that address the SQL injection vulnerabilities.

What versions of phpBB are affected by CVE-2005-1114?

CVE-2005-1114 affects multiple versions of phpBB including all versions prior to 2.0.53.

Can CVE-2005-1114 lead to data breaches?

Yes, CVE-2005-1114 can lead to data breaches as attackers can execute arbitrary SQL commands and potentially gain unauthorized access to sensitive data.

Is there a workaround for CVE-2005-1114?

A temporary workaround for CVE-2005-1114 may include input validation to sanitize the mode and search parameters until a patch is applied.