{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[],"affected_systems_content":"<P><TT>phpBB</TT> versions 2.0.17 et ant\u00e9rieures.</P>","content":"## Description\n\nL'outil phpBB est utilis\u00e9 dans la mise en \u0153uvre de forums sur\nl'Internet.\n\nQuelques vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le fichier\nusercp_register.php, permettant d'injecter du code.\n\n## Solution\n\nLa version 2.0.18 corrige ces vuln\u00e9rabilit\u00e9s. phpBB peut se t\u00e9l\u00e9charger\n\u00e0 l'adresse suivante :\n\n    http://www.phpbb.com/downloads.php\n","cves":[{"name":"CVE-2005-3420","url":"https://www.cve.org/CVERecord?id=CVE-2005-3420"},{"name":"CVE-2005-3419","url":"https://www.cve.org/CVERecord?id=CVE-2005-3419"},{"name":"CVE-2005-3415","url":"https://www.cve.org/CVERecord?id=CVE-2005-3415"},{"name":"CVE-2005-3536","url":"https://www.cve.org/CVERecord?id=CVE-2005-3536"},{"name":"CVE-2005-3310","url":"https://www.cve.org/CVERecord?id=CVE-2005-3310"},{"name":"CVE-2005-3418","url":"https://www.cve.org/CVERecord?id=CVE-2005-3418"},{"name":"CVE-2005-3416","url":"https://www.cve.org/CVERecord?id=CVE-2005-3416"},{"name":"CVE-2005-3537","url":"https://www.cve.org/CVERecord?id=CVE-2005-3537"},{"name":"CVE-2005-3417","url":"https://www.cve.org/CVERecord?id=CVE-2005-3417"}],"links":[{"title":"Site Internet de phpBB :","url":"http://www.phpbb.com"},{"title":"Bulletin de s\u00e9curit\u00e9 Debian DSA-925 du 22 d\u00e9cembre 2005 :","url":"http://www.debian.org/security/2005/dsa-925"}],"reference":"CERTA-2005-AVI-426","revisions":[{"description":"version initiale.","revision_date":"2005-10-31T00:00:00.000000"},{"description":"ajout du site de t\u00e9l\u00e9chargement de phpBB, de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Debian DSA-925 et des r\u00e9f\u00e9rences CVE.","revision_date":"2005-12-22T00:00:00.000000"}],"risks":[{"description":"Injection de code"}],"summary":null,"title":"Vuln\u00e9rabilit\u00e9s de phpBB","vendor_advisories":[{"published_at":null,"title":"Message post\u00e9 sur le site de phpBB le 30 octobre 2005","url":"http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=336756"}]}