CVE-2006-2219
Last modified
CVE-2006-2219 is a vulnerability of currently unknown severity. phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the (1) mode parameter to memberlist.php and the (2) highlight parameter to viewtopic.php that are used as an argument to the htmlspecialchars or urlencode functions, which displays the installation path in the resulting error message.. EPSS estimates a 1.46% chance of exploitation in the next 30 days.
Description
phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the (1) mode parameter to memberlist.php and the (2) highlight parameter to viewtopic.php that are used as an argument to the htmlspecialchars or urlencode functions, which displays the installation path in the resulting error message.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Phpbb Group | Phpbb | 2.0.20 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-2219?
How severe is CVE-2006-2219?
How do I fix CVE-2006-2219?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-2213Hostapd 0.3.7-2 allows remote attackers to cause a denial of…
- CVE-2006-2214Multiple SQL injection vulnerabilities in 4images 1.7.1 and …
- CVE-2006-2215Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2006-2216Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers t…
- CVE-2006-2217SQL injection vulnerability in index.php in Invision Power B…
- CVE-2006-2218Unspecified vulnerability in Internet Explorer 6.0 on Micros…
- CVE-2006-2220phpBB 2.0.20 does not properly verify user-specified input v…
- CVE-2006-2221A third-party installer generation tool, possibly BitRock In…
- CVE-2006-2222Buffer overflow in zawhttpd 0.8.23, and possibly previous ve…
- CVE-2006-2223RIPd in Quagga 0.98 and 0.99 before 20060503 does not proper…
- CVE-2006-2224RIPd in Quagga 0.98 and 0.99 before 20060503 does not proper…
- CVE-2006-2225Buffer overflow in XM Easy Personal FTP Server 4.3 and earli…
Are you affected by CVE-2006-2219?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST