PT-2004-2840 · Phpbb · Phpbb

Dariusz Kolasinski + 1 · Published 2004-04-19 · Updated 2017-07-11 · CVE-2004-1943

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBB version 1.8

Description The issue allows remote attackers to execute arbitrary PHP code via the phpbb root path parameter in the album portal.php file.

Recommendations For version 1.8, update the phpBB software to a version that fixes this issue, ensuring the phpbb root path parameter is properly sanitized to prevent remote file inclusion attacks.

Exploit

Fix

Related Identifiers

CVE-2004-1943

Affected Products

Phpbb

References · 6

• 🔥 https://exploit-db.com/exploits/24026 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1943 · Security Note
• http://securityfocus.com/bid/10177 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1943 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15916 · Note
• http://marc.info/?l=bugtraq&m=108244738102532&w=2 · Note