| Package | Affected versions | Patched versions |
|---|---|---|
| phpbb | = 2.0.0= 2.0.1= 2.0.10= 2.0.11= 2.0.12= 2.0.13= 2.0.14= 2.0.15= 2.0.16= 2.0.17= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.6c= 2.0.6d= 2.0.7= 2.0.7a= 2.0.8= 2.0.8a= 2.0.9= 2.0_beta1= 2.0_rc1= 2.0_rc2= 2.0_rc3= 2.0_rc4 |
phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass security mechanisms because PHP does not define the associated HTTP_* variables.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free