CVE-2007-2858

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field.

Link	Resource
http://securityreason.com/securityalert/2731
http://osvdb.org/37534
https://exchange.xforce.ibmcloud.com/vulnerabilities/34384
http://www.securityfocus.com/archive/1/469299/100/0/threaded

Configuration 1

cpe:2.3:a:phpbb:ip-tracking:2.0:*:*:*:*:*:*:* cpe:2.3:a:phpbb:ip-tracking:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:phpbb:ip-tracking:2.0.4:*:*:*:*:*:*:* cpe:2.3:a:phpbb:ip-tracking:2.0.3:*:*:*:*:*:*:* cpe:2.3:a:phpbb:ip-tracking:2.0.9:*:*:*:*:*:*:* cpe:2.3:a:phpbb:ip-tracking:2.0.6:*:*:*:*:*:*:* cpe:2.3:a:phpbb:ip-tracking:2.0.5:*:*:*:*:*:*:* cpe:2.3:a:phpbb:ip-tracking:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:phpbb:ip-tracking:2.0.7:*:*:*:*:*:*:* cpe:2.3:a:phpbb:ip-tracking:2.0.8:*:*:*:*:*:*:*

---

Published : 2007-05-24 07:30

Updated : 2018-10-16 04:45

---

NVD link : CVE-2007-2858

Mitre link : CVE-2007-2858

Ip-tracking

Phpbb

NVD-CWE-Other