CVE-2008-6506

Description

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de-activated accounts via unknown vectors.

Affected products

• phpBB / phpBB3.0.3
• phpBB / phpBB1.0 – 1.0
• phpBB / phpBB2.0 – 2.0
• phpBB / phpBB2.0.1 – 2.0.1
• phpBB / phpBB2.0.2 – 2.0.2
• phpBB / phpBB2.0.3 – 2.0.3
• phpBB / phpBB2.0.22 – 2.0.22
• phpBB / phpBB2.01 – 2.01
• phpBB / phpBB3.0 – 3.0
• phpBB / phpBB3.0 – 3.0
• phpBB / phpBB3.0 – 3.0
• phpBB / phpBB3.0 – 3.0
• phpBB / phpBB3.0 – 3.0
• phpBB / phpBB3.0 – 3.0
• phpBB / phpBB3.0 – 3.0
• phpBB / phpBB3.0 – 3.0
• phpBB / phpBB3.0 – 3.0
• phpBB / phpBB3.0.1 – 3.0.1
• phpBB / phpBB3.0.2 – 3.0.2

References

• MISChttp://www.phpbb.com/community/viewtopic.php?f=14&t=1352565
• VENDOR_ADVISORYhttp://secunia.com/advisories/33166
• MISChttp://www.securityfocus.com/bid/32842
• MISChttp://www.phpbb.com/support/documents.php?mode=changelog&version=3#v303
• MAILING_LISThttp://www.openwall.com/lists/oss-security/2009/02/06/2
• MISChttp://www.osvdb.org/50806
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/47370