Description

phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses.

Remediation

References

CVE-2002-2346

Related Vulnerabilities

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership SQL Injection (2.8.2)

WordPress Plugin WP-SendSMS Cross-Site Request Forgery (1.0)

WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.27)

WordPress Plugin Responsive WordPress Slider-Avartan Slider Lite Cross-Site Scripting (1.4)

WordPress Plugin DirectoryPress-Business Directory And Classified Ad Listing SQL Injection (3.6.10)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2002-2346