CVE-2001-1472: Phpbb Group Phpbb

Medium severity, CVSS 4.6. EPSS: 2.6% chance of exploitation in the next 30 days.

SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative access via the viewemail parameter.

Affected products

• Phpbb Group Phpbb: version 1.4.0 only; version 1.4.1 only

Published 2001-08-03. Last modified 2026-06-16.