| Package | Affected versions | Patched versions |
|---|---|---|
| phpbb | = 1.0.0= 1.2.0= 1.2.1= 1.4.0= 1.4.1= 1.4.2= 1.4.4= 2.0.0= 2.0.1= 2.0.10= 2.0.11= 2.0.12= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.6c= 2.0.6d= 2.0.7= 2.0.7a= 2.0.8= 2.0.8a= 2.0.9= 2.0_beta1= 2.0_rc1= 2.0_rc2= 2.0_rc3= 2.0_rc4 |
sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free