Description (CNA)
SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative access via the viewemail parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/archive/1/201715
- http://www.securityfocus.com/bid/3142
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6944
- http://www.kb.cert.org/vuls/id/314347
ADP enrichment
No English description supplied.