CVE-2026-48613

5.9 Moyenne

Publiée le 12/06/2026 à 06:17 · Modifiée le 23/06/2026 à 07:17 · Analyse NVD reportée · Source : support@hackerone.com

Description

SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL queries. Only applies to phpBB forums that had been updated from versions prior to phpBB 3.3.8 and have not been updated to 3.3.11 or newer yet.

Traduire en français

Produits concernés

phpBB

Scores CVSS

Version	Score	Source	Vecteur
3.0	5.9 Moyenne	support@hackerone.com	`CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:L`

Faiblesses (CWE)

CWE-89

Références

https://www.phpbb.com/community/viewtopic.php?t=2672170

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories