Description

phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses.

Remediation

References

CVE-2002-2346

Related Vulnerabilities

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.27)

WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Multiple Cross-Site Scripting Vulnerabilities (1.1.65)

WordPress Plugin Contact Form Submissions Unspecified Vulnerability (1.2)

Oracle JRE CVE-2013-5802 Vulnerability (CVE-2013-5802)

WordPress Plugin 3D Slider Slice Box Multiple Cross-Site Scripting Vulnerabilities (1.0)

Severity

Medium

Classification

CVE-2002-2346 CWE-200

Tags

Missing Update Known Vulnerabilities