PT-2010-3293 · Phpbb · Phpbb

Naderman + 1 · Published 2010-05-19 · Updated 2010-05-20 · CVE-2010-1627

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpBB version 3.0.7

Description The issue allows remote attackers to bypass intended access restrictions. This is due to improper permission checking for feeds in the feed.php file. The attack vectors are related to permission settings on a private forum.

Recommendations For phpBB version 3.0.7, update to version 3.0.7-PL1 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-1627

Affected Products

Phpbb

References · 5

• http://phpbb.com/community/viewtopic.php?f=14&t=2014195 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1627 · Security Note
• http://openwall.com/lists/oss-security/2010/05/18/6 · Note
• http://openwall.com/lists/oss-security/2010/05/16/1 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1627 · Note