NetSight
medium5.0

CVE-2002-2346

phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain…

Impact

phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses.

Affected products

VendorProductAffected versions
PhpbbPhpbb
Versions 2.0, 2.0.1, 2.0.2, 2.0.3

Weakness classification

References