CVE-2005-3420

Published: 1 November 2005

usercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and execute PHP code via the signature_bbcode_uid parameter, as demonstrated by injecting an "e" modifier into a preg_replace statement.

Status

References

• https://www.cve.org/CVERecord?id=CVE-2005-3420
• NVD
• Launchpad
• Debian