4 matches found
CVE-2004-1404
The CVE-2004-1404 entry concerns the Attachment Mod 2.3.10 module for phpBB when used with Apache mod_mime. The vulnerability arises from improper handling of files with double extensions (e.g., .php.rar), which can enable remote attackers to upload and execute arbitrary code on the server. The p...
CVE-2004-1399
The CVE-2004-1399 entry concerns the phpBB Attachment module (version 2.3.10 and earlier). The underlying issue is a directory traversal vulnerability where an attacker can cause a filename to include .. to read arbitrary files. Impact is described as partial confidentiality (read access) with no...
CVE-2005-1630
Technical details for CVE-2005-1630 are not publicly available in the provided documents; no concrete affected products, impact, vectors, or fixes are specified. Monitor for updates.
CVE-2006-7073
Opentools Attachment Mod