PT-2005-4816 · Phpbb · Phpbb Extreme Styles

Published 2005-12-08 · Updated 2018-10-19 · CVE-2005-4084

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpBB eXtreme Styles module versions 2.2.1 and earlier

Description The issue allows remote attackers to obtain the installation path of the application. This is achieved by exploiting the xs edit.php file in the phpBB eXtreme Styles module through an invalid viewbackup parameter.

Recommendations For versions 2.2.1 and earlier, consider restricting access to the xs edit.php file until a patch is available. As a temporary workaround, avoid using the viewbackup parameter in the xs edit.php file to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-4084

Affected Products

Phpbb Extreme Styles

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-4084 · Security Note
• http://securityfocus.com/archive/1/418518/100/0/threaded · Note