CVE-2005-0614: Phpbb Group Phpbb

High severity, CVSS 7.5. EPSS: 7.6% chance of exploitation in the next 30 days.

sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie.

Affected products

• Phpbb Group Phpbb: version 1.0.0 only; version 1.2.0 only; version 1.2.1 only; version 1.4.0 only; version 1.4.1 only; version 1.4.2 only; …

Published 2005-05-02. Last modified 2026-06-16.