Previous articleBack to news listNext article
|
Sponsored links |
Want to become one of our authors and see your work published on ALLSeek.iNFO ?
|
| phpBB Input Validation Flaw in 'groupcp.php' Permits Moderators to Inject SQL Commands |
|---|
Categorie: Vulnerability
Posted: 2004-01-05 by ReCall
Views: 474
Source: Click here
| Current Rating: Not rated
|
|
| Details |
|---|
Description: An input validation vulnerability was reported in phpBB. A remote authenticated moderator can inject SQL commands.
It is reported that the 'groupcp.php' function does not validate the $sql_in variable. A remote authenticated user with 'moderator' privileges can supply a specially crafted URL to cause arbitrary SQL commands to be executed.
Impact: A remote authenticated user with moderator privileges can execute arbitrary SQL commands on the system.
Solution: No solution was available at the time of this entry.
|
| Syndication |
|---|
Permalink Email this
The URI to TrackBack this entry is:
http://allseek.info/news/trackback.php?id=627
|
| User comments (post your comments ) |
|---|
Only registerd members can post comments and articles
|
|
Previous articleBack to news listNext article
|
