CVE-2005-1234: Phpbb Group Phpbb-Auction

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to auction_rating.php or (2) ar parameter to action_offer.php.

Affected products

• Phpbb Group Phpbb-Auction: version 1.0m only; version 1.2m only

Published 2005-05-02. Last modified 2026-06-16.