← Database

CVE-2009-3052

MEDIUM CVSS: 6.5 Published: 2009-09-03 Modified: 2026-06-16

Description

SQL injection vulnerability in root/includes/prime_quick_style.php in the Prime Quick Style addon before 1.2.3 for phpBB 3 allows remote authenticated users to execute arbitrary SQL commands via the prime_quick_style parameter to ucp.php.

Affected Platforms

Absoluteanime Prime Quick StylePhpbb Phpbb

Weakness Type

CWE-89

References