Lucene search
MitreCVELIST:CVE-2005-3415HistoryNov 01, 2005 - 9:00 p.m.
CVE-2005-3415
2005-11-0121:00:00
mitre
www.cve.org
2
phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GET/POST/COOKIE (GPC) variable and a GLOBALS[] variable with the same name, which causes phpBB to unset the GLOBALS[] variable but not the GPC variable.
References
marc.info/?l=bugtraq&m=113081113317600&w=2
secunia.com/advisories/17366
secunia.com/advisories/18098
securityreason.com/securityalert/130
securitytracker.com/id?1015121
www.debian.org/security/2005/dsa-925
www.hardened-php.net/advisory_172005.75.html
www.osvdb.org/20386
www.securityfocus.com/bid/15243
exchange.xforce.ibmcloud.com/vulnerabilities/22914
Related
cve
cve
CVE-2005-3415
2005-11-01 21:02:00
ubuntucve
ubuntucve
CVE-2005-3415
2005-11-01 00:00:00
nvd
nvd
CVE-2005-3415
2005-11-01 21:02:00
nessus
nessus
phpBB <= 2.0.17 Multiple Vulnerabilities
2005-11-02 00:00:00
FreeBSD : phpbb -- multiple vulnerabilities (28c9243a-72ed-11da-8c1d-000e0c2e438a)
2006-05-13 00:00:00
Debian DSA-925-1 : phpbb2 - several vulnerabilities
2006-10-14 00:00:00
osv
osv
phpbb2 - several
2005-12-22 00:00:00
openvas
openvas
FreeBSD Ports: phpbb, zh-phpbb-tw
2008-09-04 00:00:00
Debian: Security Advisory (DSA-925-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 925-1 (phpbb2)
2008-01-17 00:00:00
freebsd
freebsd
phpbb -- multiple vulnerabilities
2005-10-24 00:00:00
debian
debian
[SECURITY] [DSA 925-1] New phpbb2 packages fix several vulnerabilities
2005-12-22 08:19:09
[SECURITY] [DSA 925-1] New phpbb2 packages fix several vulnerabilities
2005-12-22 08:19:09