CVE-2026-48613 | phpBB up to 3.3.16 User Profile sql injection

June 12, 2026 Yanac

A vulnerability was found in phpBB up to 3.3.16. It has been classified as critical. Impacted is an unknown function of the component User Handler. The manipulation of the argument Profile leads to sql injection.

This vulnerability is traded as CVE-2026-48613. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More