Description
phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field to reference the target file.
References
- 14362 third-party-advisory
- 20050222 phpBB Group phpBB Arbitrary File Disclosure Vulnerability third-party-advisory
- GLSA-200503-02 vendor-advisory
- http://www.phpbb.com/support/documents.php?mode=changelog
- VU#774686 third-party-advisory