GHSA-5cvh-xqhr-5g87

phpBB vulnerability related to use of "forum id" in circumstances related to a "global announcement."

Source: GitHub Advisory Database (reviewed) High CVE-2010-1630

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	phpbb/phpbb	< 3.0.5	3.0.5

Details

As written in the advisory (Markdown source, shown as plain text).

Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in circumstances related to a "global announcement."

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2010-1630 advisory
https://github.com/phpbb/phpbb-app/commit/1758aa38b21f5960ab1b1a241546b34a203051b6 web
https://github.com/phpbb/phpbb-app package
http://github.com/phpbb/phpbb3/commit/4ea3402f9363c9259881bc8ea6ce7fc6cb212657 web
http://www.openwall.com/lists/oss-security/2010/05/16/1 web
http://www.openwall.com/lists/oss-security/2010/05/18/12 web
http://www.openwall.com/lists/oss-security/2010/05/19/5 web
http://www.phpbb.com/community/viewtopic.php?f=14&p=9764445 web