According to its version number, the remote version of phpbb is prone to an authentication-bypass vulnerability because it fails to properly enforce privilege requirements on some operations. Attackers can exploit this vulnerability to gain unauthorized access to the affected application, which may aid in further attacks. Versions prior to phpBB 3.0.4 are vulnerable.

Updates are available please see http://www.phpbb.com/.

• http://www.phpbb.com/
• http://www.securityfocus.com/bid/32842

---

Updated on 2015-03-25