CVEブラウザに戻る

CVE-2002-1537

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0540%

EPSS Percentile33.33th

Published2003年3月31日

Last Modified2026年4月16日

Vulnerability Description

admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".

Affected Platforms (CPE)

📦

Phpbb Group

Phpbb

= 2.0.0

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2002-10/0385.html

🔗 http://www.iss.net/security_center/static/10489.php

🔗 http://www.osvdb.org/4284

🔗 http://www.securityfocus.com/bid/6056

🔗 http://archives.neohapsis.com/archives/bugtraq/2002-10/0385.html

🔗 http://www.iss.net/security_center/static/10489.php

🔗 http://www.osvdb.org/4284

🔗 http://www.securityfocus.com/bid/6056

関連する脆弱性情報

CVE-2006-684010.0

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start paramet...

CVE-2006-683910.0

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redir...

CVE-2002-047310.0

db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the ph...

CVE-2006-684110.0

Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors.