CVE-2005-3417
phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote...
phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass security mechanisms because PHP does not define the associated HTTP_* variables.
Exploit likelihood
What each source reports
NVD Score used
phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass security mechanisms because PHP does not define the associated HTTP_* variables.
- Record
CVE-2005-3417- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass security mechanisms because PHP does not define the associated HTTP_* variables.
- Record
CVE-2005-3417- Updated
- 2026-11-02
EUVDEUVD-2005-3416 No score
phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass security mechanisms because PHP does not define the associated HTTP_* variables.
- Record
EUVD-2005-3416- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fh6q-g7pw-7m6r No score
phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote...
phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass security mechanisms because PHP does not define the associated HTTP_* variables.
- Record
GHSA-fh6q-g7pw-7m6r- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpbb2Debian:3.1 From an advisory covering 9 CVEs |
before 2.0.13+1-6sarge2, plus listed versions 2.0.13+1-62.0.13+1-6sarge1 |
2.0.13+1-6sarge2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3417 is a high vulnerability (CVSS 7.5) in Phpbb Group Phpbb, published November 1, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.31%, the 83rd percentile. No source names a fixed version.