CVE-2007-2858

Published: May 24, 2007Modified: Apr 23, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field.

Affected (10)

Products: Phpbb: Ip Tracking

Phpbb

1 product

Ip Tracking

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Phpbb Ip Tracking	Version 2.0.1
Phpbb Ip Tracking	Version 2.0.2
Phpbb Ip Tracking	Version 2.0.3
Phpbb Ip Tracking	Version 2.0.4
Phpbb Ip Tracking	Version 2.0.5
Phpbb Ip Tracking	Version 2.0.6
Phpbb Ip Tracking	Version 2.0.7
Phpbb Ip Tracking	Version 2.0.8
Phpbb Ip Tracking	Version 2.0.9
Phpbb Ip Tracking	Version 2.0