exploitDog

GHSA-x3vv-378f-cvj3

Опубликовано: 30 апр. 2022

Источник: github

Github: Не прошло ревью

Описание

SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby variable.

SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby variable.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2001-1482
https://exchange.xforce.ibmcloud.com/vulnerabilities/7253
http://www.securityfocus.com/archive/1/219178
http://www.securityfocus.com/bid/3411

EPSS

Процентиль: 66%

0.0123

Низкий

CVE ID

Связанные уязвимости

CVE-2001-1482

nvd

больше 24 лет назад

SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby variable.

CVE-2001-1482

debian

больше 24 лет назад

SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allow ...

EPSS

Процентиль: 66%

0.0123

Низкий

CVE ID