phpBB Login Form SQL Injection
High Nessus Network Monitor Plugin ID 2411
SynopsisThe remote host is vulnerable to a SQL Injection attack.
DescriptionThe remote host is running phpBB. There is a flaw in the remote software that may allow anyone to inject arbitrary SQL commands in the login form. An attacker may exploit this flaw to bypass the authentication of the remote host or execute arbitrary SQL statements against the remote database.
SolutionUpgrade or patch according to vendor recommendations.