CVE:CVE-2002-2287
CNNVD:CNNVD-200212-506
phpBB Advanced Quick Reply Hack 1.0.0版本和1.1.0版本的quick_reply.php存在PHP远程文件包含漏洞。远程攻击者可以借助phpbb_root_path参数执行任意PHP代码。
solution:Upgrade phpbb advanced_quick_reply_hack to a higher version than 1.0.0,1.1.0,and avoid the version 1.0.0,1.1.0