9 lines
No EOL
626 B
Text
9 lines
No EOL
626 B
Text
source: http://www.securityfocus.com/bid/8994/info
|
|
|
|
A SQL injection vulnerability has been reported for phpBB systems.
|
|
|
|
phpBB, in some cases, does not sufficiently sanitize user-supplied input, which is used when constructing SQL queries to execute on the underlying database. As a result, it is possible to manipulate SQL queries. This may allow a remote attacker to modify query logic or potentially corrupt the database.
|
|
|
|
SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.
|
|
|
|
http://www.example.com/profile.php?mode=viewprofile&u='[sqlcode] |