QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2005-3415

Back to search

CVE-2005-3415

Published: Nov 1, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GET/POST/COOKIE (GPC) variable and a GLOBALS[] variable with the same name, which causes phpBB to unset the GLOBALS[] variable but not the GPC variable.

VendorProductVersions

n/a

n/a

affected
n/a

References

20386
vdb-entry
x_refsource_OSVDB
DSA-925
vendor-advisory
x_refsource_DEBIAN
17366
third-party-advisory
x_refsource_SECUNIA
130
third-party-advisory
x_refsource_SREASON
18098
third-party-advisory
x_refsource_SECUNIA
1015121
vdb-entry
x_refsource_SECTRACK
15243
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now