CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-3416

phpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not been called to handle a session, allows remote attackers to bypass security checks by setting the $_SESSION and $HTTP_SESSION_VARS variables to strings instead of arrays, which causes an array_merge function call to fail.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 73.7%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2005-3416

Phpbb Group » Phpbb » Version: 2.0.0

cpe:2.3:a:phpbb_group:phpbb:2.0.0
Phpbb Group » Phpbb » Version: 2.0.1

cpe:2.3:a:phpbb_group:phpbb:2.0.1
Phpbb Group » Phpbb » Version: 2.0.10

cpe:2.3:a:phpbb_group:phpbb:2.0.10
Phpbb Group » Phpbb » Version: 2.0.11

cpe:2.3:a:phpbb_group:phpbb:2.0.11
Phpbb Group » Phpbb » Version: 2.0.12

cpe:2.3:a:phpbb_group:phpbb:2.0.12
Phpbb Group » Phpbb » Version: 2.0.13

cpe:2.3:a:phpbb_group:phpbb:2.0.13
Phpbb Group » Phpbb » Version: 2.0.14

cpe:2.3:a:phpbb_group:phpbb:2.0.14
Phpbb Group » Phpbb » Version: 2.0.15

cpe:2.3:a:phpbb_group:phpbb:2.0.15
Phpbb Group » Phpbb » Version: 2.0.16

cpe:2.3:a:phpbb_group:phpbb:2.0.16
Phpbb Group » Phpbb » Version: 2.0.17

cpe:2.3:a:phpbb_group:phpbb:2.0.17
Phpbb Group » Phpbb » Version: 2.0.2

cpe:2.3:a:phpbb_group:phpbb:2.0.2
Phpbb Group » Phpbb » Version: 2.0.3

cpe:2.3:a:phpbb_group:phpbb:2.0.3
Phpbb Group » Phpbb » Version: 2.0.4

cpe:2.3:a:phpbb_group:phpbb:2.0.4
Phpbb Group » Phpbb » Version: 2.0.5

cpe:2.3:a:phpbb_group:phpbb:2.0.5
Phpbb Group » Phpbb » Version: 2.0.6

cpe:2.3:a:phpbb_group:phpbb:2.0.6
Phpbb Group » Phpbb » Version: 2.0.6c

cpe:2.3:a:phpbb_group:phpbb:2.0.6c
Phpbb Group » Phpbb » Version: 2.0.6d

cpe:2.3:a:phpbb_group:phpbb:2.0.6d
Phpbb Group » Phpbb » Version: 2.0.7

cpe:2.3:a:phpbb_group:phpbb:2.0.7
Phpbb Group » Phpbb » Version: 2.0.7a

cpe:2.3:a:phpbb_group:phpbb:2.0.7a
Phpbb Group » Phpbb » Version: 2.0.8

cpe:2.3:a:phpbb_group:phpbb:2.0.8
Phpbb Group » Phpbb » Version: 2.0.8a

cpe:2.3:a:phpbb_group:phpbb:2.0.8a
Phpbb Group » Phpbb » Version: 2.0.9

cpe:2.3:a:phpbb_group:phpbb:2.0.9
Phpbb Group » Phpbb » Version: 2.0_beta1

cpe:2.3:a:phpbb_group:phpbb:2.0_beta1
Phpbb Group » Phpbb » Version: 2.0_rc1

cpe:2.3:a:phpbb_group:phpbb:2.0_rc1
Phpbb Group » Phpbb » Version: 2.0_rc2

cpe:2.3:a:phpbb_group:phpbb:2.0_rc2
Phpbb Group » Phpbb » Version: 2.0_rc3

cpe:2.3:a:phpbb_group:phpbb:2.0_rc3
Phpbb Group » Phpbb » Version: 2.0_rc4

cpe:2.3:a:phpbb_group:phpbb:2.0_rc4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-3416

Products

Pricing

Contact Us