Description

feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows remote attackers to bypass intended access restrictions via unspecified attack vectors related to permission settings on a private forum.

Remediation

References

CVE-2010-1627

Related Vulnerabilities

Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-1116)

WordPress Plugin Zedity:The Easiest Way To Create Posts & Pages Unspecified Vulnerability (5.0.2)

WordPress Plugin Simple Fields Cross-Site Scripting (1.4.10)

phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-5502)

Oracle Database Server CVE-2010-2412 Vulnerability (CVE-2010-2412)

Severity

Medium

Classification

CVE-2010-1627 CWE-264

Tags

Missing Update Known Vulnerabilities