Lucene search

[email protected]NVD:CVE-2005-3420

HistoryNov 01, 2005 - 9:02 p.m.

CVE-2005-3420

2005-11-0121:02:00

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.025

Percentile

90.2%

JSON

usercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and execute PHP code via the signature_bbcode_uid parameter, as demonstrated by injecting an “e” modifier into a preg_replace statement.

Affected configurations

Nvd

Node

phpbb_groupphpbbMatch2.0.0

phpbb_groupphpbbMatch2.0.1

phpbb_groupphpbbMatch2.0.2

phpbb_groupphpbbMatch2.0.3

phpbb_groupphpbbMatch2.0.4

phpbb_groupphpbbMatch2.0.5

phpbb_groupphpbbMatch2.0.6

phpbb_groupphpbbMatch2.0.6c

phpbb_groupphpbbMatch2.0.6d

phpbb_groupphpbbMatch2.0.7

phpbb_groupphpbbMatch2.0.7a

phpbb_groupphpbbMatch2.0.8

phpbb_groupphpbbMatch2.0.8a

phpbb_groupphpbbMatch2.0.9

phpbb_groupphpbbMatch2.0.10

phpbb_groupphpbbMatch2.0.11

phpbb_groupphpbbMatch2.0.12

phpbb_groupphpbbMatch2.0.13

phpbb_groupphpbbMatch2.0.14

phpbb_groupphpbbMatch2.0.15

phpbb_groupphpbbMatch2.0.16

phpbb_groupphpbbMatch2.0.17

phpbb_groupphpbbMatch2.0_beta1

phpbb_groupphpbbMatch2.0_rc1

phpbb_groupphpbbMatch2.0_rc2

phpbb_groupphpbbMatch2.0_rc3

phpbb_groupphpbbMatch2.0_rc4

VendorProductVersionCPE
phpbb_groupphpbb2.0.0cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*
phpbb_groupphpbb2.0.1cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*
phpbb_groupphpbb2.0.2cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*
phpbb_groupphpbb2.0.3cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*
phpbb_groupphpbb2.0.4cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*
phpbb_groupphpbb2.0.5cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*
phpbb_groupphpbb2.0.6cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*
phpbb_groupphpbb2.0.6ccpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*
phpbb_groupphpbb2.0.6dcpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*
phpbb_groupphpbb2.0.7cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpbb_group	phpbb	2.0.0	cpe:2.3:a:phpbb_group:phpbb:2.0.0:::::::*
phpbb_group	phpbb	2.0.1	cpe:2.3:a:phpbb_group:phpbb:2.0.1:::::::*
phpbb_group	phpbb	2.0.2	cpe:2.3:a:phpbb_group:phpbb:2.0.2:::::::*
phpbb_group	phpbb	2.0.3	cpe:2.3:a:phpbb_group:phpbb:2.0.3:::::::*
phpbb_group	phpbb	2.0.4	cpe:2.3:a:phpbb_group:phpbb:2.0.4:::::::*
phpbb_group	phpbb	2.0.5	cpe:2.3:a:phpbb_group:phpbb:2.0.5:::::::*
phpbb_group	phpbb	2.0.6	cpe:2.3:a:phpbb_group:phpbb:2.0.6:::::::*
phpbb_group	phpbb	2.0.6c	cpe:2.3:a:phpbb_group:phpbb:2.0.6c:::::::*
phpbb_group	phpbb	2.0.6d	cpe:2.3:a:phpbb_group:phpbb:2.0.6d:::::::*
phpbb_group	phpbb	2.0.7	cpe:2.3:a:phpbb_group:phpbb:2.0.7:::::::*