Re: CVE request: phpbb 3.0.7 and before 3.0.5

[Hanno Böck <hanno () hboeck de>]

Am Dienstag 18 Mai 2010 schrieb Josh Bressers:
> ----- "Steven M. Christey" <coley () linus mitre org> wrote:
> [...]
>
> > So this could use a CVE, too.  At worst it's a signal to consumers that
> > they need to patch, even if the developer isn't clearly explaining why.
> >
> > Not much different than your typical Linux kernel bug, actually :-/
> >
> > - Steve
>
> Here goes:
>
>     http://www.phpbb.com/community/viewtopic.php?f=14&p=9764445
>     # [Sec] Only use forum id supplied for posting if global announcement
>       detected. (Reported by nickvergessen)
>
> CVE-2010-1630 phpbb 3.0.5 unspecified flaw

Shouldn't this be CVE-2009-XXXX ?

-- 
Hanno Böck              Blog:           http://www.hboeck.de/
GPG: 3DBD3B20           Jabber/Mail:    hanno () hboeck de

http://schokokeks.org - professional webhosting

Attachment: signature.asc
Description: This is a digitally signed message part.