Back

CVE-2001-1482

SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby variable.

Published: Dec 31, 2001 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
phpbb_group phpbb 1.4.2

GitHub Security Advisory GHSA-x3vv-378f-cvj3

SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.23%

Top 34% most likely to be exploited

Threat Score 30.4 / 100

Data Sources

NVD EPSS GitHub