RE: [Fwd: phpBB 2.0.16 released]

From: Richard Stanway (bugtraq_at_secur1ty.net)
Date: 06/28/05

  • Next message: Alberto Trivero: "SQL Injection Exploit for ASPNuke <= 0.80" 
    To: <bugtraq@securityfocus.com>
Date: Tue, 28 Jun 2005 21:02:30 +0100

    >
    > Hi everyone,
    > phpBB Group announces the release of phpBB 2.0.16. This release addresses
    > some bugfixes and one critical security issue. To fix this, please apply
    > the following change: In viewtopic.php

    ...

    > The changelog (contained within this release) is as follows:
    > - Fixed critical issue with highlighting - Discovered and fix provided by
    > Ron van Daal

    Does anyone know what the scope of this vulnerability actually is? "Critical
    issue" isn't really enough to go on here. Are we talking arbitrary PHP code
    execution or something lesser like SQL injection or slipping HTML into the
    bbCode? Neither the phpBB Changelog or any advisories seem to mention what
    the scope of this is. I'm guessing it's arbitrary PHP code execution based
    on what previous vulnerabilities in phpBB have yielded, but it would be nice
    to know for sure.

    Rich.

  • Next message: Alberto Trivero: "SQL Injection Exploit for ASPNuke <= 0.80"