FYI…

- http://isc.sans.org/diary.php?date=2005-02-27
Updated February 28th 2005 11:57 UTC
"…phpBB 2.0.13 was released to fix 2 security vulnerabilities. Read the announcement at http://www.phpbb.com/phpBB/viewtopic.php?f=14&t;=267563
One of the fixes was labeled as critical by the developers as it would allow anybody to login with admin credentials…"

Posted: Sun Feb 27, 2005 10:45 pm Post subject: phpBB 2.0.13 released - Critical Update
- http://www.phpbb.com/phpBB/viewtopic.php?f=14&t;=267563
"…Fortunately both fixes are easy and in each case just one line needs to be edited…"


:ph34r: