CVE-2005-4358: Medium severity Phpbb Group Phpbb vulnerability
admin/admindisallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid appendsid function call that leaks the path in an error message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4358?
CVE-2005-4358 is classified as a medium severity vulnerability due to its potential for information disclosure.
How does CVE-2005-4358 affect phpBB 2.0.18?
CVE-2005-4358 allows remote attackers to obtain the installation path of phpBB 2.0.18 through a crafted request.
How do I fix CVE-2005-4358?
To fix CVE-2005-4358, you should upgrade phpBB to a later version that does not contain this vulnerability.
What kind of information can be leaked by CVE-2005-4358?
CVE-2005-4358 can leak the installation path of the phpBB application, which may assist attackers in further targeting the system.
Is CVE-2005-4358 still a concern for users of phpBB?
Yes, CVE-2005-4358 remains a concern for users of phpBB 2.0.18 that have not yet upgraded to a secure version.