5
CVSSv2

CVE-2002-2346

Published: 31/12/2002 Updated: 05/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

phpBB 2.0 up to and including 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote malicious users to obtain client IP addresses.

Vulnerable Product Search on Vulmon Subscribe to Product

phpbb phpbb 2.0

phpbb phpbb 2.0.2

phpbb phpbb 2.0.1

phpbb phpbb 2.0.3