Security Advisory

CVE-2005-0259

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-02-22 05:00:00

Last updated 2024-08-07 21:05:25

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field to reference the target file.

← Browse all CVEs View on cve.org ↗