Unscored CVE-2004-1399 EUVD-2004-1396GHSA-gvx4-48q9-3jpv

Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows remote attackers to read arbitrary files via…

Published Feb 12, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows remote attackers to read arbitrary files via a .. (dot dot) in the filename.

References

20041214 phpBB Attachment Mod Directory Traversal HTTP POST Injection mailing-list
13421 third-party-advisory
attachment-mod-directory-traversal(18437) vdb-entry
11893 vdb-entry