SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry.
| Software | From | Fixed in |
|---|---|---|
| phpgb / phpgb | 1.30 | 1.30.x |
| phpgb / phpgb | 1.10 | 1.10.x |
| phpgb / phpgb | 1.20 | 1.20.x |