CVE-2001-1471 prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) $...
HighCVSS 8.8
EPSS 7.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) $l_privnotify in auth.php from being properly initialized, which can be modified by the user and later used in an eval statement.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpbb/phpbb | <= 1.4.0 | No fix listed |
References
- 20010810 Easily and Remotely Pipe a Covert Shell on phpBB version 1.4.0 and below broken-link mailing-list
- 20010804 Re: phpBB 1.4.0 bug leads to easy admin privileges broken-link mailing-list
- VU#920931 third-party-advisory us-government-resource
- 3167 broken-link exploit patch third-party-advisory vdb-entry
- phpbb-admin-access(6944) third-party-advisory vdb-entry