CVE

Id
20554  
CVE No.
CVE-2006-4450  
Status
Candidate  
Description
usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request.  
Phase
Assigned (20060829)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
193033 20554 CVE-2006-4450 BUGTRAQ:20060512 PHPBB 2.0.20 persistent issues with avatars  View
193034 20554 CVE-2006-4450 URL:http://archives.neohapsis.com/archives/bugtraq/2006-05/0238.html  View
193035 20554 CVE-2006-4450 BID:17965  View
193036 20554 CVE-2006-4450 URL:http://www.securityfocus.com/bid/17965  View
193037 20554 CVE-2006-4450 SECUNIA:20093  View
193038 20554 CVE-2006-4450 URL:http://secunia.com/advisories/20093  View
193039 20554 CVE-2006-4450 SREASON:1470  View
193040 20554 CVE-2006-4450 URL:http://securityreason.com/securityalert/1470  View
193041 20554 CVE-2006-4450 XF:phpbb-avatar-security-bypass(26537)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60816 JVNDB-2006-003082 Web3news の security/include/_class.security.php における PHP リモートファイルインクルージョンの脆弱性 Web3news の security/include/_class.security.php には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4452 20554 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003082.html  View