CVE-2005-3537: Medium severity Phpbb Group Phpbb vulnerability
Published Dec 22, 2005
·Updated
A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by modifying certain parameters or other inputs.
Affected Software
27 affected components
Phpbb Group Phpbb=2.0.0
Phpbb Group Phpbb=2.0.1
Phpbb Group Phpbb=2.0.2
Phpbb Group Phpbb=2.0.3
Phpbb Group Phpbb=2.0.4
Phpbb Group Phpbb=2.0.5
Phpbb Group Phpbb=2.0.6
Phpbb Group Phpbb=2.0.6c
Phpbb Group Phpbb=2.0.6d
Phpbb Group Phpbb=2.0.7
Phpbb Group Phpbb=2.0.7a
Phpbb Group Phpbb=2.0.8
Phpbb Group Phpbb=2.0.8a
Phpbb Group Phpbb=2.0.9
Phpbb Group Phpbb=2.0.10
Phpbb Group Phpbb=2.0.11
Phpbb Group Phpbb=2.0.12
Phpbb Group Phpbb=2.0.13
Phpbb Group Phpbb=2.0.14
Phpbb Group Phpbb=2.0.15
Phpbb Group Phpbb=2.0.16
Phpbb Group Phpbb=2.0.17
Phpbb Group Phpbb=2.0_beta1
Phpbb Group Phpbb=2.0_rc1
Phpbb Group Phpbb=2.0_rc2
Phpbb Group Phpbb=2.0_rc3
Phpbb Group Phpbb=2.0_rc4
Remediation
Patch Available
Patch Available
Event History
Dec 22, 2005
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3537?
CVE-2005-3537 is considered a moderate severity vulnerability as it allows attackers to edit private messages of other users.
2
How do I fix CVE-2005-3537?
To fix CVE-2005-3537, upgrade phpBB to version 2.0.18 or later to implement the necessary request validation.
3
What versions of phpBB are affected by CVE-2005-3537?
CVE-2005-3537 affects phpBB versions 2.0.0 through 2.0.17.
4
Can CVE-2005-3537 be exploited remotely?
Yes, CVE-2005-3537 can be exploited remotely without authentication, compromising user private messages.
5
What types of attacks are possible with CVE-2005-3537?
Exploitation of CVE-2005-3537 could allow attackers to manipulate and edit private messages sent between users.