Lucene search
HistoryAug 12, 2002 - 4:00 a.m.
CVE-2002-0533
phpbb
old versions
remote attack
denial of service
database corruption
bbcode
null character
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7 High
AI Score
Confidence
High
0.014 Low
EPSS
Percentile
86.6%
phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters within [code] tags.
Affected configurations
Node
phpbb_groupphpbbMatch1.0.0
ORphpbb_groupphpbbMatch1.2.0
ORphpbb_groupphpbbMatch1.2.1
ORphpbb_groupphpbbMatch1.4.0
ORphpbb_groupphpbbMatch1.4.1
ORphpbb_groupphpbbMatch1.4.2
ORphpbb_groupphpbbMatch1.4.4
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7 High
AI Score
Confidence
High
0.014 Low
EPSS
Percentile
86.6%
Related for CVE-2002-0533