CVE-2007-4653: SQL Injection
SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter in a search action.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4653?
CVE-2007-4653 is considered a critical vulnerability due to its potential for remote SQL injection, which can lead to unauthorized access to sensitive data.
How do I fix CVE-2007-4653?
To fix CVE-2007-4653, upgrade to a version of phpBB that is later than 2.0.22 which does not include the vulnerability.
What software is affected by CVE-2007-4653?
CVE-2007-4653 affects Links MOD 1.2.2 and earlier for phpBB version 2.0.22 and earlier.
Can CVE-2007-4653 be exploited by unauthenticated users?
Yes, CVE-2007-4653 can be exploited by unauthenticated users through crafted search actions.
What are the consequences of exploiting CVE-2007-4653?
Exploiting CVE-2007-4653 can allow attackers to execute arbitrary SQL commands, potentially compromising the database and leaking sensitive information.