CVE-2008-6506 Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de-activated accounts via unknown vectors.
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de-activated accounts via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpbb/phpbb | <= 3.0.3 | No fix listed |
| phpbb/phpbb | = 1.0 | No fix listed |
| phpbb/phpbb | = 2.0 | No fix listed |
| phpbb/phpbb | = 2.0.1 | No fix listed |
| phpbb/phpbb | = 2.0.2 | No fix listed |
| phpbb/phpbb | = 2.0.3 | No fix listed |
| phpbb/phpbb | = 2.0.22 | No fix listed |
| phpbb/phpbb | = 2.01 | No fix listed |
| phpbb/phpbb | = 3.0 | No fix listed |
| phpbb/phpbb | = 3.0-rc1 | No fix listed |
| phpbb/phpbb | = 3.0-rc2 | No fix listed |
| phpbb/phpbb | = 3.0-rc3 | No fix listed |
| phpbb/phpbb | = 3.0-rc4 | No fix listed |
| phpbb/phpbb | = 3.0-rc5 | No fix listed |
| phpbb/phpbb | = 3.0-rc6 | No fix listed |
| phpbb/phpbb | = 3.0-rc7 | No fix listed |
| phpbb/phpbb | = 3.0-rc8 | No fix listed |
| phpbb/phpbb | = 3.0.1 | No fix listed |
| phpbb/phpbb | = 3.0.2 | No fix listed |
References
- 33166 third-party-advisory vendor-advisory
- [oss-security] 20090206 CVE request: phpbb < 3.0.4 mailing-list
- 50806 vdb-entry
- www.phpbb.com vendor-advisory
- www.phpbb.com
- 32842 vdb-entry
- phpbb-account-activation-security-bypass(47370) vdb-entry