CVE-2003-1216

Published: Nov 27, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the search_id parameter.

Affected (19)

Products: Phpbb Group: Phpbb

Phpbb Group

1 product

Phpbb

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Phpbb Group Phpbb	Version 1.0.0
Phpbb Group Phpbb	Version 1.2.0
Phpbb Group Phpbb	Version 1.2.1
Phpbb Group Phpbb	Version 1.4.0
Phpbb Group Phpbb	Version 1.4.1
Phpbb Group Phpbb	Version 1.4.2
Phpbb Group Phpbb	Version 1.4.4
Phpbb Group Phpbb	Version 2.0.0
Phpbb Group Phpbb	Version 2.0.1
Phpbb Group Phpbb	Version 2.0.2
Phpbb Group Phpbb	Version 2.0.3
Phpbb Group Phpbb	Version 2.0.4
Phpbb Group Phpbb	Version 2.0.5
Phpbb Group Phpbb	Version 2.0.6
Phpbb Group Phpbb	Version 2.0_beta1
Phpbb Group Phpbb	Version 2.0_rc1
Phpbb Group Phpbb	Version 2.0_rc2
Phpbb Group Phpbb	Version 2.0_rc3
Phpbb Group Phpbb	Version 2.0_rc4