National Cyber Awareness System

Vulnerability Summary for CVE-2006-2219

Overview

phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the (1) mode parameter to memberlist.php and the (2) highlight parameter to viewtopic.php that are used as an argument to the htmlspecialchars or urlencode functions, which displays the installation path in the resulting error message.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: XF

Name: phpbb-multiple-path-disclosure(26306)

Type: Advisory

Hyperlink:http://xforce.iss.net/xforce/xfdb/26306

External Source: SREASON

Name: 837

Hyperlink:http://securityreason.com/securityalert/837

External Source: FULLDISC

Name: 20060505 phpBB 2.0.20 Full Path Disclosure and SQL Errors

Type: Advisory; Exploit

Hyperlink:http://marc.theaimsgroup.com/?l=full-disclosure&m=114685931319903&w=2

External Source: BUGTRAQ

Name: 20060508 Re: phpBB 2.0.20 Full Path Disclosure and SQL Errors

Type: Advisory; Exploit

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=114731067321710&w=2

External Source: BUGTRAQ

Name: 20060505 phpBB 2.0.20 Full Path Disclosure and SQL Errors

Type: Advisory; Exploit

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=114695651425026&w=2