Re: CVE request: phpbb 3.0.7 and before 3.0.5

[Josh Bressers <bressers () redhat com>]

----- "Steven M. Christey" <coley () linus mitre org> wrote:
[...]
> So this could use a CVE, too.  At worst it's a signal to consumers that
> they need to patch, even if the developer isn't clearly explaining why.
>
> Not much different than your typical Linux kernel bug, actually :-/
>
> - Steve

Here goes:

    http://www.phpbb.com/community/viewtopic.php?f=14&p=9764445
    # [Sec] Only use forum id supplied for posting if global announcement
      detected. (Reported by nickvergessen)

CVE-2010-1630 phpbb 3.0.5 unspecified flaw

Thanks.

-- 
    JB