CVE-2004-2350

SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the search_results parameter.

Date published : 2005-08-16

http://www.securityfocus.com/bid/9883

http://www.securityfocus.com/archive/1/357442