usercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and execute PHP code via the signature_bbcode_uid parameter, as demonstrated by injecting an "e" modifier into a preg_replace statement.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.02323
Percentile: 0.84135

CVSS Scoring

Affected Products

• cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*

← Back to Home