CVE-2002-0533Group Phpbb vulnerability

2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
1.5%
top 18.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 12
Latest updateApr 30

Description

phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters within [code] tags.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

NVDphpbb_group/phpbb7 versions+6

Patches

🔴Vulnerability Details

1
GHSA
GHSA-7mrw-2pjj-rfq6: phpBB 12022-04-30