What’s Vulnerable › Vulnerabilities

CVE-2002-1537

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2003-03-31 · updated 2026-06-16

Description

admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".

Affected products

• Phpbb Group Phpbb: 2.0.0

References

• http://archives.neohapsis.com/archives/bugtraq/2002-10/0385.html
• http://www.iss.net/security_center/static/10489.php
• http://www.osvdb.org/4284
• http://www.securityfocus.com/bid/6056
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0385.html
• http://www.iss.net/security_center/static/10489.php
• http://www.osvdb.org/4284
• http://www.securityfocus.com/bid/6056

Get alerted when CVE-2002-1537 or the next vulnerability affects your stack