|
Family: CGI abuses --> Category: infos
Multiple vulnerabilities in phpBB 2.0.11 and older Vulnerability Scan
Vulnerability Scan Summary Multiple vulnerabilities in phpBB version 2.0.11 and older
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote web server contains a PHP application that is affected by
multiple vulnerabilities.
Description :
The remote host is running phpBB version 2.0.11 or older. Such
versions suffer from multiple vulnerabilities:
- full path display on critical messages.
- full path disclosure in username handling caused by a PHP 4.3.10 bug.
- arbitrary file disclosure vulnerability in avatar handling functions.
- arbitrary file unlink vulnerability in avatar handling functions.
- path disclosure bug in search.php caused by a PHP 4.3.10 bug.
- path disclosure bug in viewtopic.php caused by a PHP 4.3.10 bug.
The path disclosure vulnerabilities can be exploited by remote
attackers to reveal sensitive information about the installation that
can be used in further attacks against the target.
To exploit the avatar handling vulnerabilities, 'Enable gallery
avatars' must be enabled on the target (by default, it is disabled)
and a possible hacker have a phpBB account on the target.
See also :
http://www.phpbb.com/support/documents.php?mode=changelog#2011
Solution :
Upgrade to phpBB 2.0.12 or later.
Threat Level:
Low / CVSS Base Score : 2
(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|