Lucene search
RootSSV:19679HistoryMay 24, 2010 - 12:00 a.m.
phpBB < 3.0.5 posting.php脚本错误权限检查漏洞
2010-05-2400:00:00
Root
www.seebug.org
18
0.003 Low
EPSS
Percentile
68.4%
CVE(CAN) ID: CVE-2010-1630
phpBB是非常流行的WEB论坛程序。
phpBB的posting.php脚本在对张贴执行某些操作时没有正确地验证论坛ID，远程攻击者可以绕过预期的安全限制执行非授权操作。
phpBB < 3.0.5
厂商补丁：
phpBB Group
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://code.phpbb.com/repositories/diff/phpbb/branches/phpBB-3_0_0/phpBB/posting.php?rev=9499
Related
ubuntucve
ubuntucve
CVE-2010-1630
2010-05-19 00:00:00
cve
cve
CVE-2010-1630
2022-10-03 16:21:00
openvas
openvas
phpBB Forum ID Security Bypass Vulnerability
2010-01-25 00:00:00
phpBB Forum ID Security Bypass Vulnerability
2010-01-25 00:00:00
phpBB 'posting.php' Unspecified Vulnerability
2010-05-25 00:00:00
prion
prion
Design/Logic Flaw
2010-05-19 22:30:00
cvelist
cvelist
CVE-2010-1630
2022-10-03 16:21:00
nvd
nvd
CVE-2010-1630
2010-05-19 22:30:01