First published: Fri Jul 18 2008(Updated: )
Unspecified vulnerability in phpBB before 3.0.1 has unknown impact and attack vectors related to "urls gone through redirect() being used within login_box()."
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
phpBB | <=3.0.1 | |
phpBB | =3.0-rc1 | |
phpBB | =3.0-rc2 | |
phpBB | =3.0-rc3 | |
phpBB | =3.0-rc4 | |
phpBB | =3.0-rc5 | |
phpBB | =3.0-rc7 | |
phpBB | =3.0-rc8 | |
phpBB | =3.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2008-3224 is currently unspecified, as the exact impact and attack vectors are unknown.
To fix CVE-2008-3224, upgrade phpBB to version 3.0.1 or later, as this is the first patched release.
CVE-2008-3224 affects phpBB versions prior to 3.0.1, including various release candidates and version 3.0.0.
CVE-2008-3224 may involve unidentified attack vectors related to the use of urls in the login_box() function.
Currently, no official workarounds are provided for CVE-2008-3224, the best mitigation is to upgrade to a secure version.