CVE-2006-2219

phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the (1) mode parameter to memberlist.php and the (2) highlight parameter to viewtopic.php that are used as an argument to the htmlspecialchars or urlencode functions, which displays the installation path in the resulting error message.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://securityreason.com/securityalert/837
http://marc.info/?l=bugtraq&m=114695651425026&w=2
http://marc.info/?l=bugtraq&m=114731067321710&w=2
http://marc.info/?l=full-disclosure&m=114685931319903&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/26306

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:phpbb_group:phpbb:2.0.20:*:*:*:*:*:*:*

Information

Published : 2007-02-08 09:28

Updated : 2017-07-19 18:31

NVD link : CVE-2006-2219

Mitre link : CVE-2006-2219

JSON object : View

CWE

CWE-20

Improper Input Validation

Advertisement

Products Affected

phpbb_group

phpbb

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://securityreason.com/securityalert/837", "name": "837", "tags": [], "refsource": "SREASON"}, {"url": "http://marc.info/?l=bugtraq&m=114695651425026&w=2", "name": "20060505 phpBB 2.0.20 Full Path Disclosure and SQL Errors", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://marc.info/?l=bugtraq&m=114731067321710&w=2", "name": "20060508 Re: phpBB 2.0.20 Full Path Disclosure and SQL Errors", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://marc.info/?l=full-disclosure&m=114685931319903&w=2", "name": "20060505 phpBB 2.0.20 Full Path Disclosure and SQL Errors", "tags": [], "refsource": "FULLDISC"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26306", "name": "phpbb-multiple-path-disclosure(26306)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the (1) mode parameter to memberlist.php and the (2) highlight parameter to viewtopic.php that are used as an argument to the htmlspecialchars or urlencode functions, which displays the installation path in the resulting error message."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-2219", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2007-02-08T17:28Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:phpbb_group:phpbb:2.0.20:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-20T01:31Z"}