CVE-2004-0729 PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid (1) category_rows parameter to index.php, (2) faq parameter to faq.php, or (3) ranksrow parameter to profile.php, which...

MediumCVSS 5.0 EPSS 1.4%

Published: 2004-07-23 07:00
Updated: 2026-06-17 01:06
Exploit status: No public exploit known

Description

PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid (1) category_rows parameter to index.php, (2) faq parameter to faq.php, or (3) ranksrow parameter to profile.php, which reveal the full path in an error message.

Affected products

Product	Affected versions	Fixed in
phpbb group phpbb	= 2.0.8	No fix listed
phpbb group phpbb	= 2.0.8a	No fix listed

References

20040716 [waraxe-2004-SA#034 - XSS and path full path disclosure in PhpBB 2.0.8] mailing-list
www.waraxe.us
phpbb-indexphp-path-disclosure(16716) vdb-entry
phpbb-lang-faq-path-disclosure(16720) vdb-entry
phpbb-usercpviewprofile-path-disclosure(16723) vdb-entry

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.43% (percentile 73.3)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.