viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regular expression syntax, which reveals the path in a PHP error message.

Threat-Mapped Scoring

Score: 3.0

Priority: P2 - Serious (High)

• S1 – Steal Customer Account Information

EPSS

Score: 0.0412
Percentile: 0.88139

CVSS Scoring

Affected Products

• cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*
• cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*

← Back to Home