PT-2010-3295 · Phpbb Limited · Phpbb

Nickvergessen · Published 2010-05-19 · Updated 2022-05-17 · CVE-2010-1630

Positive Technologies (AI Summary)

CVSS v4.0

8.1

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions phpBB versions prior to 3.0.5

Description The issue is related to an unspecified vulnerability in the posting.php file, which involves the use of a forum id in certain circumstances related to a global announcement. The impact and attack vectors of this issue are unknown.

Recommendations For versions prior to 3.0.5, update to version 3.0.5 or later to resolve the issue.

Fix

Related Identifiers

CVE-2010-1630

GHSA-5CVH-XQHR-5G87

Affected Products

Phpbb

References · 10

• http://phpbb.com/community/viewtopic.php?f=14&p=9764445 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1630 · Security Note
• https://osv.dev/vulnerability/GHSA-5cvh-xqhr-5g87 · Vendor Advisory
• https://github.com/phpbb/phpbb-app · Note
• https://github.com/phpbb/phpbb-app/commit/1758aa38b21f5960ab1b1a241546b34a203051b6 · Note
• http://github.com/phpbb/phpbb3/commit/4ea3402f9363c9259881bc8ea6ce7fc6cb212657 · Note
• http://openwall.com/lists/oss-security/2010/05/18/12 · Note
• http://openwall.com/lists/oss-security/2010/05/19/5 · Note
• http://openwall.com/lists/oss-security/2010/05/16/1 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1630 · Note