GitHub Advisoryadvisory · Packagist

GHSA-jw8f-q84g-r3vm phpBB vulnerable to sensitive information disclosure

HIGH Published 2022-05-17 Modified 2024-10-30 Official page ↗
Aliases
CVE-2008-6507
Ecosystem
Packagist
Packages
phpbb/phpbb
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200
Reviewed
2024-10-30

Affected packages

• Packagist phpbb/phpbb: < 3.0.4 → fixed in 3.0.4

Description

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum.

Related

Alias · CVE (1)

  • CVE-2008-6507 Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References