CVE

Id
11465  
CVE No.
CVE-2005-0259  
Status
Candidate  
Description
phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field to reference the target file.  
Phase
Assigned (20050209)  
Votes
None (candidate not yet proposed)  
Comments