viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into the result, which is then processed by PHP exec, as exploited by the Santy.A worm.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.85909
Percentile: 0.99337

CVSS Scoring

Affected Products

• cpe:2.3:a:phpbb_group:phpbb:*:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:1.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:1.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:1.2.0:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:1.2.1:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:1.4.2:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:1.4.4:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*

← Back to Home