Launchpad.net

CVE 2005-3536

SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type.

See the CVE page on Mitre.org for more details.

References