CVE-2007-2858
Published May 24, 2007
Last updated 6 years ago
Overview
- Description
- SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.5
- Impact score
- 6.4
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:phpbb:ip-tracking:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "925FB83E-FA03-4AF5-B876-1297C63DE387"
},
{
"criteria": "cpe:2.3:a:phpbb:ip-tracking:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09D64890-DE65-4E8E-83CB-D1491D67FEC3"
},
{
"criteria": "cpe:2.3:a:phpbb:ip-tracking:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC10D3EA-58CD-484D-8668-F4C2DE342909"
},
{
"criteria": "cpe:2.3:a:phpbb:ip-tracking:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B76EFBB1-4E1D-4B7D-A7C3-56983515CD70"
},
{
"criteria": "cpe:2.3:a:phpbb:ip-tracking:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C862160A-5D79-4663-BB32-E162EBE8730A"
},
{
"criteria": "cpe:2.3:a:phpbb:ip-tracking:2.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F58AAB29-BCF0-46E5-B715-C6A59AC7943A"
},
{
"criteria": "cpe:2.3:a:phpbb:ip-tracking:2.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96773A96-4E30-4F4C-B19B-14E8C31A2992"
},
{
"criteria": "cpe:2.3:a:phpbb:ip-tracking:2.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4413B45-DAE6-4599-BD45-24456414D2AB"
},
{
"criteria": "cpe:2.3:a:phpbb:ip-tracking:2.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34BF0F23-D34A-42D6-AE22-8BCF4012F2FF"
},
{
"criteria": "cpe:2.3:a:phpbb:ip-tracking:2.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52D2730A-2BCE-4B6C-9EA1-7BF885711AF1"
}
],
"operator": "OR"
}
]
}
]