Loading
Generated remediation guidance and an executive summary. No account required.
phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GET/POST/COOKIE (GPC) variable and a GLOBALS[] variable with the same name, which causes phpBB to unset the GLOBALS[] variable but not the GPC variable.
Use Phpbb Group vendor hub and Phpbb product page to widen CVE-2005-3415 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2007-1695, CVE-2006-6841 and CVE-2006-6840 for nearby disclosures in the same product family.