VULHUB ™

It is reported that phpBB Fetch All is susceptible to an SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input before using it in an SQL query. The problem presents itself when malicious SQL statements are passed as a value for the 'forum_id' argument in the 'common.php' script. The script uses this argument without sanitization in an SQL query. The successful exploitation of this vulnerability depends on the implementation of the web application that includes phpBB Fetch All as a component. It may or may not be possible to effectively pass malicious SQL statements to the underlying function. Versions prior to 2.0.12 are reported to be affected.

It is reported that phpBB Fetch All is susceptible to an SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input before using it in an SQL query. The problem presents itself when malicious SQL statements are passed as a value for the 'forum_id' argument in the 'common.php' script. The script uses this argument without sanitization in an SQL query. The successful exploitation of this vulnerability depends on the implementation of the web application that includes phpBB Fetch All as a component. It may or may not be possible to effectively pass malicious SQL statements to the underlying function. Versions prior to 2.0.12 are reported to be affected.