bugtraq - RE: [Fwd: phpBB 2.0.16 released]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 28 Jun 2005 21:02:30 +0100
From: "Richard Stanway" <bugtraq@...ur1ty.net>
To: <bugtraq@...urityfocus.com>
Subject: RE: [Fwd: phpBB 2.0.16 released]

>
> Hi everyone,
> phpBB Group announces the release of phpBB 2.0.16. This release addresses
> some bugfixes and one critical security issue. To fix this, please apply
> the following change: In viewtopic.php

...

> The changelog (contained within this release) is as follows:
> - Fixed critical issue with highlighting - Discovered and fix provided by
> Ron van Daal

Does anyone know what the scope of this vulnerability actually is? "Critical
issue" isn't really enough to go on here. Are we talking arbitrary PHP code
execution or something lesser like SQL injection or slipping HTML into the
bbCode? Neither the phpBB Changelog or any advisories seem to mention what
the scope of this is. I'm guessing it's arbitrary PHP code execution based
on what previous vulnerabilities in phpBB have yielded, but it would be nice
to know for sure.

Rich.