Description
Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | phpbb/phpbb | < 3.0.4 | 3.0.4 | GHSA-jw8f-q84g-r3vm |
References
- http://www.phpbb.com/community/viewtopic.php?f=14&t=1352565
- 33166 third-party-advisory
- http://www.phpbb.com/support/documents.php?mode=changelog&version=3#v303
- [oss-security] 20090206 CVE request: phpbb < 3.0.4 mailing-list
- 50806 vdb-entry