Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de-activated accounts via unknown vectors.
CVSS Score
5.0
EPSS Score
0.005
Published
2009-03-23
phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses.
CVSS Score
5.0
EPSS Score
0.003
Published
2002-12-31