Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters within [code] tags.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPBB BBCode导致拒绝服务攻击漏洞
Vulnerability Description
phpBB是phpBB组开发的一套开源的且基于PHP语言的Web论坛软件。该软件具有支持多国语言、多种数据库和自定义版面设计等特点。 phpBB对"源代码"类的引用处理不正确，攻击者可以发送特殊格式的转义字符串可导致产生拒绝服务攻击。 攻击者可以在任意帖子中提交[code]\0\0\0\0\0\0\0[/code]类似的代码，就可以导致数据库需要处理输入的"\0"的数量的平方，如果发送 1 MByte的数据，系统实际处理的数据将接近 1 TByte。 大量的类似输入提交就可以导致系统产生拒绝服务。如果使用
CVSS Information
N/A
Vulnerability Type
N/A