Field Assessment
AI analysis pending.
CVE
CVE-2005-0259
Severity
MEDIUM
CVSS
6.4
EPSS
2.04%
Original Filing — NVD Description
phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field to reference the target file.