CVE-2004-1404: Opentools Attachment Mod

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, does not properly handle files with multiple file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.

Affected products

• Opentools Attachment Mod: version 2.3.4 only; version 2.3.5 only; version 2.3.6 only; version 2.3.7 only; version 2.3.8 only; version 2.3.9 only; …

Published 2004-12-31. Last modified 2026-06-16.