Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
phpBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2002-2346 - Vulnerability Database
phpBB

phpBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2002-2346

Medium
Reference: CVE-2002-2346
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2002-2346
Title: phpBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system which allows remote attackers to obtain client IP addresses.