CyberSec.Space Logo
Back to CVE Browser

CVE-2002-2176

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0600%
EPSS Percentile30.64th
PublishedDec 31, 2002
Last ModifiedApr 16, 2026

Vulnerability Description

SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the user_level parameter in the User Profile page.

Affected Platforms (CPE)

📦
Phpbb Group

Phpbb

= 2.0.0
📦
Phpbb Group

Phpbb

= 2.0.1

References & Advisories

🔗 http://online.securityfocus.com/archive/1/284691
🔗 http://www.iss.net/security_center/static/9692.php
🔗 http://www.securityfocus.com/bid/5342
🔗 http://online.securityfocus.com/archive/1/284691
🔗 http://www.iss.net/security_center/static/9692.php
🔗 http://www.securityfocus.com/bid/5342

Related Vulnerabilities

CVE-2002-153710.0

admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with mo...

CVE-2006-683910.0

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redir...

CVE-2002-047310.0

db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the ph...

CVE-2006-684010.0

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start paramet...