viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regular expression syntax, which reveals the path in a PHP error message.
References
Link | Resource |
---|---|
http://neossecurity.net/Advisories/Advisory-06.txt | |
http://www.phpbb.com/phpBB/viewtopic.php?t=267563 | Patch Vendor Advisory |
http://secunia.com/advisories/14413 | Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=110943646112950&w=2 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-02-27 21:00
Updated : 2016-10-17 20:13
NVD link : CVE-2005-0603
Mitre link : CVE-2005-0603
JSON object : View
CWE
Products Affected
phpbb_group
- phpbb