Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in kb.php in Fully Modded phpBB (phpbbfm) 80220 allows remote attackers to execute arbitrary SQL commands via the k parameter in an article action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fully Modded PHPBB2 'kb.php' SQL注入漏洞
Vulnerability Description
Fully Modded PHPBB2是一款基于PHP的论坛程序。 PHPBB2在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞执行SQL注入攻击。 如果将mode设置为article且设置了page_num的话，Fully Modded PHPBB2的kb.php文件没有正确地验证k参数便将其用到了SQL查询中，这允许攻击者通过提交特制的SQL查询请求执行SQL注入攻击。成功攻击可能允许攻击者检索管理员用户名和口令哈希，但要求知道数据库表前缀。
CVSS Information
N/A
Vulnerability Type
N/A