Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
phpBB SQL Injection Vulnerability (CVE-2026-48613) - Vulnerability Database

phpBB SQL Injection Vulnerability (CVE-2026-48613)

Description

SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL queries. Only applies to phpBB forums that had been updated from versions prior to phpBB 3.3.8 and have not been updated to 3.3.11 or newer yet.

References

CVE-2026-48613

Related Vulnerabilities

VirtueMart access control bypass High
Common tags: Missing Update Known Vulnerabilities
Vulnerable JavaScript libraries Medium
Common tags: Missing Update Known Vulnerabilities
Invision Power Board version 3.3.4 unserialize PHP code execution High
Common tags: Missing Update Known Vulnerabilities
IBM Lotus Domino web server Cross-Site Scripting vulnerabilities High
Common tags: Missing Update Known Vulnerabilities
VMware directory traversal and privilege escalation vulnerabilities High
Common tags: Missing Update Known Vulnerabilities

Severity

High

Classification

CVE-2026-48613
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:L/CR:H/IR:H/AR:H

Tags

Missing Update
Known Vulnerabilities