Lucene search
HistoryAug 30, 2006 - 1:04 a.m.
CVE-2006-4450
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.061 Low
EPSS
Percentile
93.6%
usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request.
Affected configurations
Node
phpbb_groupphpbbMatch2.0.20
Related
cve
cve
CVE-2006-4450
2006-08-30 01:04:00
cvelist
cvelist
CVE-2006-4450
2006-08-30 01:00:00
nessus
nessus
Debian DSA-1066-1 : phpbb2 - missing input sanitising
2006-10-14 00:00:00
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.061 Low
EPSS
Percentile
93.6%
Related for NVD:CVE-2006-4450