CVE-2004-1943: High severity phpbb group phpbb vulnerability
Published Apr 19, 2004
·Updated
PHP remote file inclusion vulnerability in albumportal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter.
Affected Software
18 affected components
Phpbb Group Phpbb=2.0.5
Phpbb Group Phpbb=2.0.7a
Phpbb Group Phpbb=2.0.8
Phpbb Group Phpbb=2.0.1
Phpbb Group Phpbb=2.0.3
Phpbb Group Phpbb=2.0_rc2
Phpbb Group Phpbb=2.0_rc1
Phpbb Group Phpbb=2.0.4
Phpbb Group Phpbb=2.0.7
Phpbb Group Phpbb=2.0.8a
Phpbb Group Phpbb=2.0.6d
Phpbb Group Phpbb=2.0.2
Phpbb Group Phpbb=2.0.6c
Phpbb Group Phpbb=2.0_rc4
Phpbb Group Phpbb=2.0.6
Phpbb Group Phpbb=2.0.0
Phpbb Group Phpbb=2.0_rc3
Phpbb Group Phpbb=2.0_beta1
Remediation
Patch Available
Event History
Apr 19, 2004
CVE Published
04:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1943?
CVE-2004-1943 is classified as a high-severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2004-1943?
To fix CVE-2004-1943, you should update phpBB to the latest version to patch the vulnerability.
3
What are the affected versions for CVE-2004-1943?
CVE-2004-1943 affects phpBB versions 2.0.0 through 2.0.8, including specific modifications.
4
What type of vulnerability is CVE-2004-1943?
CVE-2004-1943 is a remote file inclusion vulnerability that allows attackers to execute arbitrary PHP code.
5
Who can be affected by CVE-2004-1943?
Websites running vulnerable versions of phpBB modified by Przemo are at risk of exploitation from remote attackers.