CVE-2005-3537

N/A

Published: December 22, 2005 at 11:00 PM UTC

Updated: June 16, 2026 at 10:17 PM UTC

1 product affected across 1 vendorphpBB

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 1%

Description

A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by modifying certain parameters or other inputs.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

phpBB · Phpbb Group

95%

2.0.0 2.0.1 2.0.10 2.0.11 2.0.12 2.0.13 2.0.14 2.0.15 2.0.16 2.0.17 2.0.2 2.0.3 2.0.4 2.0.5 2.0.6 2.0.6c 2.0.6d 2.0.7 2.0.7a 2.0.8 2.0.8a 2.0.9 2.0_beta1 2.0_rc1 2.0_rc2 2.0_rc3 2.0_rc4

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (3)

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/18098

Vendor Advisoryx_refsource_DEBIANPatch

Source: [email protected]

http://www.debian.org/security/2005/dsa-925

VDB Entryx_refsource_BIDPatch

Source: [email protected]

http://www.securityfocus.com/bid/15246

CVSS

5MEDIUM[email protected]

Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card