CVE-2018-19274

Passing an absolute path to a file_exists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization…

published November 17, 2018

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

Passing an absolute path to a file_exists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization when an attacker has access to the Admin Control Panel with founder permissions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05201 · 92.5th percentile
Published
2018-11-17T13:00Z
EPSS history
Timeline
  • 17 NOV 13:00Z
    Passing an absolute path to a file_exists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization…
    cvelistv5