4.3
CVSSv2

CVE-2010-1627

Published: 19/05/2010 Updated: 20/05/2010
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

feed.php in phpBB 3.0.7 prior to 3.0.7-PL1 does not properly check permissions for feeds, which allows remote malicious users to bypass intended access restrictions via unspecified attack vectors related to permission settings on a private forum.

Vulnerable Product Search on Vulmon Subscribe to Product

phpbb phpbb 3.0.7

Vendor Advisories

Debian Bug report logs - #570011 phpbb3: weak captcha attracts spambots Package: phpbb3; Maintainer for phpbb3 is phpBB packaging team <phpbb-l@listsa-eskwadraatnl>; Source for phpbb3 is src:phpbb3 (PTS, buildd, popcon) Reported by: "JMRoth" <jmroth+debbug@iiplu> Date: Mon, 15 Feb 2010 20:39:01 UTC Owned by: jmr ...