Description
Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in circumstances related to a "global announcement."
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | phpbb/phpbb | < 3.0.5 | 3.0.5 | GHSA-5cvh-xqhr-5g87 |
References
- [oss-security] 20100518 Re: CVE request: phpbb 3.0.7 and before 3.0.5 mailing-list
- http://github.com/phpbb/phpbb3/commit/4ea3402f9363c9259881bc8ea6ce7fc6cb212657
- [oss-security] 20100519 Re: CVE request: phpbb 3.0.7 and before 3.0.5 mailing-list
- http://www.phpbb.com/community/viewtopic.php?f=14&p=9764445
- [oss-security] 20100517 CVE request: phpbb 3.0.7 and before 3.0.5 mailing-list