Field Assessment
AI analysis pending.
CVE
CVE-2005-4358
Severity
MEDIUM
CVSS
5
EPSS
2.08%
Original Filing — NVD Description
admin/admin_disallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid append_sid function call that leaks the path in an error message.