|
phpBB Memberlist Search And Private Message Attachment Mutliple Security Bypass Vulnerabilities
phpBB is prone to two vulnerabilities that attackers can leverage to bypass security restrictions. These issues affect the memberlist search and the private-message attachment features. Authenticated attackers can exploit these issues to determine the private email addresses of arbitrary users and to view files that are attached to private messages between arbitrary users. Information harvested in successful exploits will aid in further attacks. phpBB 3.0.0 is vulnerable; prior versions may also be affected. |
|
|
Privacy Statement |
