CVE-2010-1630

Packagist/phpbb/phpbb CVE-2010-1630: critical 9.8

phpBB vulnerability related to use of "forum id" in circumstances related to a "global announcement."

Action: Upgrade phpbb/phpbb to 3.0.5 or later.

composer require phpbb/phpbb:3.0.5

Affected

Fixed versions

Sources

• osv: GHSA-5cvh-xqhr-5g87
• https://nvd.nist.gov/vuln/detail/CVE-2010-1630
• https://github.com/phpbb/phpbb-app/commit/1758aa38b21f5960ab1b1a241546b34a203051b6
• https://github.com/phpbb/phpbb-app
• http://github.com/phpbb/phpbb3/commit/4ea3402f9363c9259881bc8ea6ce7fc6cb212657
• http://www.openwall.com/lists/oss-security/2010/05/16/1
• http://www.openwall.com/lists/oss-security/2010/05/18/12
• http://www.openwall.com/lists/oss-security/2010/05/19/5
• http://www.phpbb.com/community/viewtopic.php?f=14&p=9764445

CVE-2010-1630 · published 2022-05-17T05:51:07Z · modified 2024-10-30T18:12:24.982910Z · JSON