CVE

Id
4274  
CVE No.
CVE-2001-1471  
Status
Candidate  
Description
prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) $l_privnotify in auth.php from being properly initialized, which can be modified by the user and later used in an eval statement.  
Phase
Assigned (20050421)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
20422 4274 CVE-2001-1471 BUGTRAQ:20010804 Re: phpBB 1.4.0 bug leads to easy admin privileges  View
20423 4274 CVE-2001-1471 URL:http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-08/0087.html  View
20424 4274 CVE-2001-1471 BUGTRAQ:20010810 Easily and Remotely Pipe a Covert Shell on phpBB version 1.4.0 and below  View
20425 4274 CVE-2001-1471 URL:http://archives.neohapsis.com/archives/bugtraq/2001-08/0123.html  View
20426 4274 CVE-2001-1471 CERT-VN:VU#920931  View
20427 4274 CVE-2001-1471 URL:http://www.kb.cert.org/vuls/id/920931  View
20428 4274 CVE-2001-1471 BID:3167  View
20429 4274 CVE-2001-1471 URL:http://www.securityfocus.com/bid/3167  View
20430 4274 CVE-2001-1471 XF:phpbb-admin-access(6944)  View

Related JVN