CERT24phpBB fixes authentication bypass bug present for a decadeLoading data…
CERT24Threat Observatory
Period

phpBB fixes authentication bypass bug present for a decade

An authentication bypass vulnerability in the phpBB forum software allows an attacker to log in as any user, including an administrator, with a single HTTP request. It affects phpBB versions 4.0.0-a2 and 3.3.16 and earlier. The issue was fixed in version 3.3.17; according to the source, no fix was yet available for the 4.x branch.

← Back to intelligence

phpBB fixes authentication bypass bug present for a decade

An authentication bypass vulnerability in the phpBB forum software allows an attacker to log in as any user, including an administrator, with a single HTTP request. It affects phpBB versions 4.0.0-a2 and 3.3.16 and earlier. The issue was fixed in version 3.3.17; according to the source, no fix was yet available for the 4.x branch.