CVE-2008-6507 phpBB vulnerable to sensitive information disclosure
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpbb/phpbb(Packagist) | < 3.0.4 | 3.0.4 |
| phpbb/phpbb | = 3.0.0 | No fix listed |
| phpbb/phpbb | = 3.0.1 | No fix listed |
| phpbb/phpbb | = 3.0.2 | No fix listed |
| phpbb/phpbb | = 3.0.3 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- github.com patch
- github.com product
- [oss-security] 20090206 CVE request: phpbb < 3.0.4 mailing-list
- www.phpbb.com
- www.phpbb.com
- 33166 third-party-advisory vendor-advisory
- 50806 vdb-entry
- github.com