The version of phpBB installed on the remote host fails to properly block 'bad' redirection targets.  In addition, it reportedly contains a non-persistent cross-site scripting flaw involving its private messaging functionality and several other issues.  At a minimum, a remote attacker can leverage these flaws to launch cross-site scripting attacks against the affected application.

Several remote vulnerabilities have been discovered in phpBB, a web-based bulletin board. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2008-0471     Private messaging allowed cross site request forgery,     making it possible to delete all private messages of a     user by sending them to a crafted web page.

  - CVE-2006-6841 / CVE-2006-6508     Cross site request forgery enabled an attacker to     perform various actions on behalf of a logged in user.
    (Applies to sarge only.)

  - CVE-2006-6840     A negative start parameter could allow an attacker to     create invalid output. (Applies to sarge only.)

  - CVE-2006-6839     Redirection targets were not fully checked, leaving room     for unauthorised external redirections via a phpBB     forum. (Applies to sarge only.)

  - CVE-2006-4758     An authenticated forum administrator may upload files of     any type by using specially crafted filenames. (Applies     to sarge only.)

リモートホストにインストールされているphpBBのバージョンは、「不正な」リダイレクションターゲットのブロックに失敗します。加えて、報告によると、そのプライベートメッセージング機能とその他のいくつかの問題に関連する、非持続型のクロスサイトスクリプティングの欠陥が含まれています。少なくとも、リモート攻撃者が、これらの欠陥を利用して、影響を受けるアプリケーションに対してクロスサイトスクリプティング攻撃を仕掛ける可能性があります。

遠端主機上安裝的 phpBB 版本無法正確封鎖「bad」重新導向目標。此外，據報其還有一個涉及私人訊息功能的非持續性跨網站指令碼瑕疵以及其他數個問題。遠端攻擊者至少可利用這些瑕疵，對受影響的應用程式執行跨網站指令碼攻擊。

According to its banner, the remote host is running a version of phpBB that fails to sanitize user-supplied input.  The details of several of these flaws is unknown; however, it is known that one of the vulnerabilities is an HTML injection flaw.  This can enable an attacker to cause arbitrary HTML and script code to be executed in a user's browser within the context of the affected site. 

ID	名稱	產品	系列	已發布	已更新	嚴重性
23968	phpBB < 2.0.22 Multiple Vulnerabilities	Nessus	CGI abuses	2007/1/3	2022/4/11	critical
30227	Debian DSA-1488-1 : phpbb2 - several vulnerabilities	Nessus	Debian Local Security Checks	2008/2/11	2021/1/4	critical
23968	phpBB < 2.0.22の複数の脆弱性	Nessus	CGI abuses	2007/1/3	2022/4/11	critical
23968	phpBB < 2.0.22 多個弱點	Nessus	CGI abuses	2007/1/3	2022/4/11	critical
3874	phpBB < 2.0.22 Multiple Vulnerabilities	Nessus Network Monitor	CGI	2006/12/29	2019/3/6	medium

偵測

搜尋 Plugin

critical

critical

critical

critical

medium