CVE-2006-4450

usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the…

published August 30, 2006

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04196 · 90.9th percentile
Published
2006-08-30T01:00Z
EPSS history
Timeline
  • 30 AUG 01:00Z
    usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the…
    cvelistv5