PHPBB2 Avatar图像信息泄露漏洞

漏洞信息详情

PHPBB2 Avatar图像信息泄露漏洞

漏洞简介

从phpBB 2.0到 2.0.3版本为具有客户端系统的十六进制编码IP地址上传头像文件生成名称。远程攻击者获得客户端IP地址。

漏洞公告

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com .
@securityfocus.com>

参考网址

来源: BID
名称: 5923
链接:http://www.securityfocus.com/bid/5923

来源: XF
名称: phpbb-avatar-ip-address(10323)
链接:http://www.iss.net/security_center/static/10323.php

来源: BUGTRAQ
名称: 20021009 phpBB2 Showing users ip adresses
链接:http://online.securityfocus.com/archive/1/294560

© 版权声明
THE END
喜欢就支持一下吧
点赞0 分享