PHPBB Multiple Unspecified Admin Pages Vulnerabilities

Bugtraq ID:	12013
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Mar 29 2004 12:00AM
Updated:	Mar 29 2004 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	phpBB Group phpBB 2.0.7 a phpBB Group phpBB 2.0.7
Not Vulnerable:	phpBB Group phpBB 2.0.8

PHPBB Multiple Unspecified Admin Pages Vulnerabilities

PhpBB is affected by multiple unspecified vulnerabilities in the admin pages. This issue is most likely due to the application failing to properly sanitize user-supplied input.

This issue was reported to affect phpBB version 2.0.7, however, earlier versions may also be vulnerable.

PHPBB Multiple Unspecified Admin Pages Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PHPBB Multiple Unspecified Admin Pages Vulnerabilities

Solution:
The vendor has addressed this issue in phpBB 2.0.8 and later.


phpBB Group phpBB 2.0.7

• phpBB Group phpBB 2.0.11
  http://www.phpbb.com/downloads.php

phpBB Group phpBB 2.0.7 a

• phpBB Group phpBB 2.0.11
  http://www.phpbb.com/downloads.php

PHPBB Multiple Unspecified Admin Pages Vulnerabilities

References:

• phpBB Changelog (phpBB)
  
• phpBB Homepage (phpBB)