CVE-2002-1707: Medium severity phpbb group phpbb vulnerability
install.php in phpBB 2.0 through 2.0.1, when "allowurlfopen" and "registerglobals" variables are set to "on", allows remote attackers to execute arbitrary PHP code by modifying the phpbbrootdir parameter to reference a URL on a remote web server that contains the code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1707?
CVE-2002-1707 has a severity rating that indicates it could allow remote code execution, making it critical for affected systems.
How do I fix CVE-2002-1707?
To fix CVE-2002-1707, disable the 'allow_url_fopen' and 'register_globals' directives in your PHP configuration.
Which versions of phpBB are affected by CVE-2002-1707?
CVE-2002-1707 affects phpBB versions from 2.0 to 2.0.1, including release candidates.
What type of vulnerability is CVE-2002-1707?
CVE-2002-1707 is a remote code execution vulnerability due to improper handling of the 'phpbb_root_dir' parameter.
Can I prevent CVE-2002-1707 by updating phpBB?
Yes, updating to versions of phpBB later than 2.0.1 will help mitigate the risks associated with CVE-2002-1707.