CVE-2006-0438

Опубликовано: 06 фев. 2006

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.19, when Link to off-site Avatar or bbcode (IMG) are enabled, allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag in a user profile, as demonstrated using links to (1) admin/admin_users.php and (2) modcp.php.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.18:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.19:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00745

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2006-0438

ubuntu

больше 19 лет назад

CVE-2006-0438

debian

больше 19 лет назад

Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.19, when ...

GHSA-9gcp-v627-wxgc

github

больше 3 лет назад

EPSS

Процентиль: 72%

0.00745

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other