CVE-2005-3416: High severity Phpbb Group Phpbb vulnerability
phpBB 2.0.17 and earlier, when registerglobals is enabled and the sessionstart function has not been called to handle a session, allows remote attackers to bypass security checks by setting the $SESSION and $HTTPSESSIONVARS variables to strings instead of arrays, which causes an arraymerge function call to fail.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3416?
CVE-2005-3416 is classified as a moderate severity vulnerability.
How do I fix CVE-2005-3416?
To fix CVE-2005-3416, disable register_globals in your PHP configuration and ensure session_start is invoked appropriately.
What versions are affected by CVE-2005-3416?
CVE-2005-3416 affects phpBB versions 2.0.17 and earlier.
What type of vulnerability is CVE-2005-3416?
CVE-2005-3416 is a vulnerability that allows remote attackers to bypass security checks.
Is CVE-2005-3416 still a concern for phpBB users?
Yes, users of affected phpBB versions should address CVE-2005-3416 to protect against potential exploits.