View Full Version : A phpBB security was found


Floris
29th December 2006, 12:49 PM
phpBB Avatar_Path PHP Code Execution Vulnerability (http://www.securityfocus.com/bid/20347)
2006-12-28
http://www.securityfocus.com/bid/20347

PHPBB Multiple Input Validation Vulnerabilities (http://www.securityfocus.com/bid/21806)
2006-12-28
http://www.securityfocus.com/bid/21806


If you are running phpBB on the same server or even the same account as vBulletin I recommend to upgrade phpBB as soon as possible to patch this known issue (and all the others).

SomeOne
17th January 2007, 10:16 AM
Where did you find that?

Floris
19th January 2007, 11:18 PM
Obviously on the site I linked too? :)

Swordude
8th June 2007, 08:42 PM
I don't think I really understand what those links are saying, but the good thing is I don't use phpBB :D

Onimua
10th June 2007, 01:44 PM
Title threw me off... I thought you meant security was found in phpBB, not a security exploit. :p

Chroder
11th June 2007, 06:55 AM
Title threw me off... I thought you meant security was found in phpBB, not a security exploit. :p
Haha, that made me lol.

But really, phpBB must be one of the most insecure web apps I know of. phpBB3 has been coded from the ground up, I hope security has improved.

XpcPro
13th January 2008, 11:39 AM
vbulletin for ever, no just phpbb :p