Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

NeoSmart.net Forum:
New 0-day Vulnerability Found in phpBB
May 19, 2006 @ 06:45:59

According to this forum post on the NeoSmart message boards, there's a new "0-day vulnerability" that they've discovered in the phpBB message board system.

Our research team has discovered a new (aka 0-day) vulnerability in phpBB, that affects all existing versions (including the Olympus CVS as of May 18th, 2006).

This phpBB security vulnerability has been scaled at a threat level of 6/10; allowing normal members access to privileged and restricted-access content on a phpBB forum. The bug lies in the email notification system and can be used to track comments made on any hidden posts that were once user accessible.

Since this bug has just broken today, there's no response from phpBB as of yet with a patch, but expect it soon if this issue is as important as the post mentions.

tagged: vulnerability 0-day phpbb email notification system track comments vulnerability 0-day phpbb email notification system track comments

Link:

NeoSmart.net Forum:
New 0-day Vulnerability Found in phpBB
May 19, 2006 @ 06:45:59

According to this forum post on the NeoSmart message boards, there's a new "0-day vulnerability" that they've discovered in the phpBB message board system.

Our research team has discovered a new (aka 0-day) vulnerability in phpBB, that affects all existing versions (including the Olympus CVS as of May 18th, 2006).

This phpBB security vulnerability has been scaled at a threat level of 6/10; allowing normal members access to privileged and restricted-access content on a phpBB forum. The bug lies in the email notification system and can be used to track comments made on any hidden posts that were once user accessible.

Since this bug has just broken today, there's no response from phpBB as of yet with a patch, but expect it soon if this issue is as important as the post mentions.

tagged: vulnerability 0-day phpbb email notification system track comments vulnerability 0-day phpbb email notification system track comments

Link: