| Package | Affected versions | Patched versions |
|---|---|---|
| phpbb | = 1.4.0= 1.4.1= 1.4.2= 1.4.4 |
Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. (dot dot) sequences followed by NULL (%00) characters in CGI parameters, as demonstrated using the lang parameter in prefs.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free