NVD

Id
69076  
Name
CVE-2005-3415  
Description
phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GET/POST/COOKIE (GPC) variable and a GLOBALS[] variable with the same name, which causes phpBB to unset the GLOBALS[] variable but not the GPC variable.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-11-01  
Modified Date
2017-07-10  
Seq
2005-3415  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
357152 69076 CVE-2005-3415 20051031 Advisory 17/2005: phpBB Multiple Vulnerabilities  View
357153 69076 CVE-2005-3415 130  View
357154 69076 CVE-2005-3415 1015121  View
357155 69076 CVE-2005-3415 DSA-925  View
357156 69076 CVE-2005-3415 http://www.hardened-php.net/advisory_172005.75.html  View
357157 69076 CVE-2005-3415 15243  View
357158 69076 CVE-2005-3415 phpbb-multiple-variables-bypass-security(22914)  View

Related JVN