CVE-2004-0729: Phpbb Group Phpbb

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid (1) category_rows parameter to index.php, (2) faq parameter to faq.php, or (3) ranksrow parameter to profile.php, which reveal the full path in an error message.

Affected products

• Phpbb Group Phpbb: version 2.0.8 only; version 2.0.8a only

Published 2004-07-27. Last modified 2026-06-16.