diff options
| author | delphij <delphij@FreeBSD.org> | 2004-12-22 20:17:09 +0800 |
|---|---|---|
| committer | delphij <delphij@FreeBSD.org> | 2004-12-22 20:17:09 +0800 |
| commit | 36c6601cadc73e93fd090f83cd5ca3a4ff081830 (patch) | |
| tree | e24375ede15be28bd1e58694426acb804e09f0c2 | |
| parent | d3ecdcccc9921596ebe5cb463a2c033844069ee8 (diff) | |
| download | freebsd-ports-gnome-36c6601cadc73e93fd090f83cd5ca3a4ff081830.tar.gz freebsd-ports-gnome-36c6601cadc73e93fd090f83cd5ca3a4ff081830.tar.zst freebsd-ports-gnome-36c6601cadc73e93fd090f83cd5ca3a4ff081830.zip | |
Document phpBB vulnerability that exists on phpBB < 2.0.11
Submitted by: Kang LIU <liukang bjut edu cn>
| -rw-r--r-- | security/vuxml/vuln.xml | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index a20f6fdeb377..ad5b8cb557d8 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -10053,4 +10053,38 @@ misc.c: <vuln vid="3362f2c1-8344-11d8-a41f-0020ed76ef5a"> <cancelled/> </vuln> + + <vuln vid="e3cf89f0-53da-11d9-92b7-ceadd4ac2edd"> + <topic>User input validation problem in phpBB</topic> + <affects> + <package> + <name>phpbb</name> + <range><lt>2.0.11</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>A US-CERT Technical Cyber Security Alert reports:</p> + <blockquote + cite="http://www.us-cert.gov/cas/techalerts/TA04-356A.html"> + <p>phpBB contains an user input validation problem with regard to + the parsing of the URL. An intruder can deface a phpBB website, execute + arbitrary commands, or gain administrative privileges on a compromised + bulletin board.</p> + </blockquote> + </body> + </description> + <references> + <freebsdpr>ports/74106</freebsdpr> + <uscertta>TA04-356A</uscertta> + <url>http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=240636</url> + <url>http://www.kb.cert.org/vuls/id/497400</url> + <url>http://www.us-cert.gov/cas/techalerts/TA04-356A.html</url> + </references> + <dates> + <discovery>2004-11-18</discovery> + <entry>2004-12-22</entry> + </dates> + </vuln> + </vuxml> |