Back to CVE Browser

CVE-2002-1537

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0540%

EPSS Percentile33.33th

PublishedMar 31, 2003

Last ModifiedApr 16, 2026

Vulnerability Description

admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".

Affected Platforms (CPE)

📦

Phpbb Group

Phpbb

= 2.0.0

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2002-10/0385.html

🔗 http://www.iss.net/security_center/static/10489.php

🔗 http://www.osvdb.org/4284

🔗 http://www.securityfocus.com/bid/6056

🔗 http://archives.neohapsis.com/archives/bugtraq/2002-10/0385.html

🔗 http://www.iss.net/security_center/static/10489.php

🔗 http://www.osvdb.org/4284

🔗 http://www.securityfocus.com/bid/6056

Related Vulnerabilities

CVE-2006-684010.0

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start paramet...

CVE-2006-683910.0

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redir...

CVE-2002-047310.0

db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the ph...

CVE-2006-684110.0

Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors.