5
CVSSv2

CVE-2002-1707

Published: 31/12/2002 Updated: 11/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

install.php in phpBB 2.0 up to and including 2.0.1, when "allow_url_fopen" and "register_globals" variables are set to "on", allows remote malicious users to execute arbitrary PHP code by modifying the phpbb_root_dir parameter to reference a URL on a remote web server that contains the code.

Vulnerable Product Search on Vulmon Subscribe to Product

phpbb group phpbb 2.0.1

phpbb group phpbb 2.0 rc2

phpbb group phpbb 2.0 rc1

phpbb group phpbb 2.0 rc4

phpbb group phpbb 2.0.0

phpbb group phpbb 2.0 rc3