CVE-2001-1472

MEDIUM 4.6CVE-2001-1472 · Published 03/08/2001 · updated 16/06/2026

In short

CVE-2001-1472 is a MEDIUM (CVSS 4.6) vulnerability affecting phpbb (phpbb group).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpbb phpbb_group	`= 1.4.0= 1.4.1`	No fix yet

Description

SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative access via the viewemail parameter.

References

kb.cert.org/vuls/id/314347 · US Government Resource
securityfocus.com/archive/1/201715 · Exploit
securityfocus.com/bid/3142 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/6944

More vulnerabilities in phpbb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free