1. CVE-Search
  2. CVE-2015-3880
ID CVE-2015-3880
Summary Open redirect vulnerability in phpBB before 3.0.14 and 3.1.x before 3.1.4 allows remote attackers to redirect users of Google Chrome to arbitrary web sites and conduct phishing attacks via unspecified vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:phpbb:phpbb:3.0.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.0.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:a1:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:a1:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:a2:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:a2:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:a3:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:a3:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:b1:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:b1:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:b2:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:b2:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:b3:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:b3:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:b4:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:b4:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:rc4:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:rc4:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:rc5:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:rc5:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.0:rc6:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.0:rc6:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.3:rc2:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.3:rc2:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:phpbb:phpbb:3.1.4:rc2:*:*:*:*:*:*
    cpe:2.3:a:phpbb:phpbb:3.1.4:rc2:*:*:*:*:*:*
CVSS
Base: 5.8 (as of 27-09-2017 - 17:42)
Impact:
Exploitability:
CWE CWE-601
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:N
refmap via4
bid 74592
confirm
mlist [oss-security] 20150512 Re: CVE Request: phpbb open redirect
Last major update 27-09-2017 - 17:42
Published 19-09-2017 - 15:29
Last modified 27-09-2017 - 17:42
Back to Top