CVE-2002-1537 admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".
HighCVSS 10.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpbb group phpbb | = 2.0.0 | No fix listed |
References
- 20021027 Privilege Escalation Vulnerability In phpBB 2.0.0 exploit mailing-list vendor-advisory
- phpbb-adminugauth-admin-privileges(10489) patch vdb-entry vendor-advisory
- 4284 vdb-entry
- 6056 patch vdb-entry vendor-advisory