PT-2006-7112 · Phpbb · Phpbb

Publicado 2006-12-14 · Atualizado 2017-07-29 · CVE-2006-6508

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBB version 2.0.21

Description A cross-site request forgery (CSRF) issue allows remote authenticated users to send unauthorized messages as an arbitrary user via unspecified vectors.

Recommendations For phpBB version 2.0.21, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-6508

DSA-1488-1

Produtos afetados

Phpbb

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-6508 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30786 · Nota
• http://debian.org/security/2008/dsa-1488 · Aviso do Fabricante
• http://secunia.com/advisories/23283 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6508 · Nota
• http://secunia.com/advisories/28871 · Nota