GCVE-110-CERTCC-2001-314347

Advisory Published

Vulnetix · Advisory published August 3, 2001

phpBB is an open-source bulletin board program. There exists a user input validation problem with regard to the parsing of the URL. An intruder can excute limited SQL queries and gain administrative privileges on the bulletin board.

Download JSON Open in Console

Risk Scores

certcc-cam

impact15population6exploitation10widely_known20score_current20.25ease_of_exploitation20

References

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

url

phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

advisory

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON