PT-2010-3295 · Phpbb Limited · Phpbb

Nickvergessen · Publicado 2010-05-19 · Atualizado 2022-05-17 · CVE-2010-1630

Positive Technologies (AI Summary)

CVSS v4.0

8.1

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions phpBB versions prior to 3.0.5

Description The issue is related to an unspecified vulnerability in the posting.php file, which involves the use of a forum id in certain circumstances related to a global announcement. The impact and attack vectors of this issue are unknown.

Recommendations For versions prior to 3.0.5, update to version 3.0.5 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2010-1630

GHSA-5CVH-XQHR-5G87

Produtos afetados

Phpbb

Referências · 10

• https://github.com/phpbb/phpbb-app · Nota
• https://github.com/phpbb/phpbb-app/commit/1758aa38b21f5960ab1b1a241546b34a203051b6 · Nota
• http://phpbb.com/community/viewtopic.php?f=14&p=9764445 · Aviso do Fabricante
• http://github.com/phpbb/phpbb3/commit/4ea3402f9363c9259881bc8ea6ce7fc6cb212657 · Nota
• http://openwall.com/lists/oss-security/2010/05/18/12 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-1630 · Nota de Segurança
• http://openwall.com/lists/oss-security/2010/05/19/5 · Nota
• http://openwall.com/lists/oss-security/2010/05/16/1 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1630 · Nota
• https://osv.dev/vulnerability/GHSA-5cvh-xqhr-5g87 · Aviso do Fabricante