CVE-2007-2858: Phpbb IP-Tracking

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field.

Affected products

• Phpbb IP-Tracking: version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; …

Published 2007-05-24. Last modified 2026-06-16.