Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

PHPBB Session.PHP Autologin User_Level Privilege Escalation Vulnerability

phpBB is reported prone to a privilege escalation vulnerability. The issue is reported to exist when an autologin fails.

A remote attacker may potentially exploit this vulnerability to gain access to parts of the affected website that should only be visible to a website administrator.

Information harvested through exploitation of this vulnerability may be employed to aid in further attacks against the affected site.

This vulnerability is reported to affect phpBB versions up to up to 2.0.13.







 

Privacy Statement
Copyright 2009, SecurityFocus