CVE-2002-2346

CVE-2002-2346 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses.

Learn more about our Web Application Penetration Testing UK.