phpBB alltopics.php SQLI

phpBB alltopics.php SQLI Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

CVE-2006-4367

The CVE-2006-4367 issue affects phpBB 2.0.21 with the All Topics Hack 1.5.0 and earlier, where alltopics.php is vulnerable to SQL injection via the start parameter. The underlying cause is an insecure handling of the start input, enabling an attacker to manipulate SQL execution remotely. Public r...