Unscored CVE-2010-1627 EUVD-2010-1650GHSA-8h9c-rcwj-jg8p

feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows remote attackers to bypass intended ac…

Published May 19, 2010 · Updated Sep 17, 2024 · Assigned by redhat

Description

feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows remote attackers to bypass intended access restrictions via unspecified attack vectors related to permission settings on a private forum.

References

[oss-security] 20100518 Re: CVE request: phpbb 3.0.7 and before 3.0.5 mailing-list
http://www.phpbb.com/community/viewtopic.php?f=14&t=2014195
[oss-security] 20100517 CVE request: phpbb 3.0.7 and before 3.0.5 mailing-list