CVE
- Id
- 11465
- CVE No.
- CVE-2005-0259
- Status
- Candidate
- Description
- phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field to reference the target file.
- Phase
- Assigned (20050209)
- Votes
- None (candidate not yet proposed)
- Comments