Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote attackers to delete (unlink) arbitrary files via "/../" sequences in the avatarselect parameter.
References
Link | Resource |
---|---|
http://www.gentoo.org/security/en/glsa/glsa-200503-02.xml | |
http://www.idefense.com/application/poi/display?id=205&type=vulnerabilities | Patch Vendor Advisory |
http://www.phpbb.com/support/documents.php?mode=changelog | Vendor Advisory |
http://www.gentoo.org/security/en/glsa/glsa-200503-02.xml | |
http://www.idefense.com/application/poi/display?id=205&type=vulnerabilities | Patch Vendor Advisory |
http://www.phpbb.com/support/documents.php?mode=changelog | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:54
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.gentoo.org/security/en/glsa/glsa-200503-02.xml - | |
References | () http://www.idefense.com/application/poi/display?id=205&type=vulnerabilities - Patch, Vendor Advisory | |
References | () http://www.phpbb.com/support/documents.php?mode=changelog - Vendor Advisory |
Information
Published : 2005-03-14 05:00
Updated : 2024-11-20 23:54
NVD link : CVE-2005-0258
Mitre link : CVE-2005-0258
CVE.ORG link : CVE-2005-0258
JSON object : View
Products Affected
phpbb_group
- phpbb
CWE