Security Advisory
CVE-2004-2350
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the search_results parameter.