CVE-2004-0729 in phpBB

Summary

PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid (1) category_rows parameter to index.php, (2) faq parameter to faq.php, or (3) ranksrow parameter to profile.php, which reveal the full path in an error message.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 07/22/2004
• Disclosure: 07/27/2004
• Moderation: VulDB entry created
• Entries: VDB-21969 (1)
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00692
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0729
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0729
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0729/