VulnerabilityModified
CVE-2003-1373
Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via ..
MEDIUM 6.8EPSS 1.27%
Does this matter?
Lower severity and a low EPSS score (1.27%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. (dot dot) sequences followed by NULL (%00) characters in CGI parameters, as demonstrated using the lang parameter in prefs.php.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.27% probability · 68th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- phpbb group/phpbb
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0245.html
- http://www.securityfocus.com/bid/6889
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11407
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0245.html
- http://www.securityfocus.com/bid/6889
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11407
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.