CVEvulnerability

CVE-2018-19274

7.2 HIGH Published 2018-11-17 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2018-11-17
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses: CWE-1321, CWE-502

Description

Passing an absolute path to a file_exists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization when an attacker has access to the Admin Control Panel with founder permissions.

Affected configurations

• phpbb phpbb (< 3.2.4) • debian debian linux 8.0

Weakness · CWE (2)

CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness
CWE-502 Deserialization of Untrusted Data weakness

References

https://blog.ripstech.com/2018/phpbb3-phar-deserialization-to-remote-code-execution/ Exploit, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/11/msg00029.html Mailing List, Third Party Advisory
https://www.phpbb.com/community/viewtopic.php?f=14&t=2492206 Patch, Vendor Advisory
https://blog.ripstech.com/2018/phpbb3-phar-deserialization-to-remote-code-execution/ Exploit, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/11/msg00029.html Mailing List, Third Party Advisory
https://www.phpbb.com/community/viewtopic.php?f=14&t=2492206 Patch, Vendor Advisory

CVE-2018-19274

Description

Affected configurations

Related

Weakness · CWE (2)

References