← Database

CVE-2009-3208

HIGH CVSS: 7.5 Published: 2009-09-16 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in phpfreeBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to permalink.php and (2) year parameter to index.php.

Affected Platforms

Prakashatma Mishra Phpfreebb

Weakness Type

CWE-89

References