CVE-2008-6507: Phpbb

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum.

Affected products

• Phpbb Phpbb: version 3.0.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only

Published 2009-03-23. Last modified 2026-06-16.