SQL Injection in Prakashatma Mishra Phpfreebb

CVE-2009-3208

Multiple SQL injection vulnerabilities in phpfreeBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to permalink.php and (2) year parameter to index.php.

Vulnerability class: SQL Injection

EPSS: 0.009 (57.7th percentile) — read the EPSS interpretation.

Affected products

Prakashatma_mishra Phpfreebb — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, x_refsource_MISC)