Vulnerability Details CVE-2005-1026
Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to dlman.php in DLMan Pro or (2) id parameter to links.php in Linkz Pro (aka LinksLinks Pro).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 62.9%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=111271895819594&w=2
- http://marc.info/?l=bugtraq&m=111272430128195&w=2
- http://www.securityfocus.com/bid/13028
- http://www.securityfocus.com/bid/13030
- http://www.snailsource.com/forum/dlman.php?func=file_info&file_id=77
- http://marc.info/?l=bugtraq&m=111271895819594&w=2
- http://marc.info/?l=bugtraq&m=111272430128195&w=2
- http://www.securityfocus.com/bid/13028
- http://www.securityfocus.com/bid/13030
- http://www.snailsource.com/forum/dlman.php?func=file_info&file_id=77