CVE-2003-1215

Published: Dec 29, 2003Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in groupcp.php for phpBB 2.0.6 and earlier allows group moderators to perform unauthorized activities via the sql_in parameter.

Affected (19)

Products: Phpbb Group: Phpbb

Phpbb Group

1 product

Phpbb

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Phpbb Group Phpbb	Version 1.0.0
Phpbb Group Phpbb	Version 1.2.0
Phpbb Group Phpbb	Version 1.2.1
Phpbb Group Phpbb	Version 1.4.0
Phpbb Group Phpbb	Version 1.4.1
Phpbb Group Phpbb	Version 1.4.2
Phpbb Group Phpbb	Version 1.4.4
Phpbb Group Phpbb	Version 2.0.0
Phpbb Group Phpbb	Version 2.0.1
Phpbb Group Phpbb	Version 2.0.2
Phpbb Group Phpbb	Version 2.0.3
Phpbb Group Phpbb	Version 2.0.4
Phpbb Group Phpbb	Version 2.0.5
Phpbb Group Phpbb	Version 2.0.6
Phpbb Group Phpbb	Version 2.0_beta1
Phpbb Group Phpbb	Version 2.0_rc1
Phpbb Group Phpbb	Version 2.0_rc2
Phpbb Group Phpbb	Version 2.0_rc3
Phpbb Group Phpbb	Version 2.0_rc4