CVE-2004-2350

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the search_results parameter.

Affected (19)

Products: Phpbb Group: Phpbb

Phpbb Group

1 product

Phpbb

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Phpbb Group Phpbb	Version 1.0.0
Phpbb Group Phpbb	Version 1.2.0
Phpbb Group Phpbb	Version 1.2.1
Phpbb Group Phpbb	Version 1.4.0
Phpbb Group Phpbb	Version 1.4.1
Phpbb Group Phpbb	Version 1.4.2
Phpbb Group Phpbb	Version 1.4.4
Phpbb Group Phpbb	Version 2.0.0
Phpbb Group Phpbb	Version 2.0.1
Phpbb Group Phpbb	Version 2.0.2
Phpbb Group Phpbb	Version 2.0.3
Phpbb Group Phpbb	Version 2.0.4
Phpbb Group Phpbb	Version 2.0.5
Phpbb Group Phpbb	Version 2.0.6
Phpbb Group Phpbb	Version 2.0_beta1
Phpbb Group Phpbb	Version 2.0_rc1
Phpbb Group Phpbb	Version 2.0_rc2
Phpbb Group Phpbb	Version 2.0_rc3
Phpbb Group Phpbb	Version 2.0_rc4