phpBB forum fixes auth bypass bug lurking for a decade (opens in new tab)

Covers 10 year old critical vulnerability in phpBB affecting tens of millions of users across thousands of forums

A 10-year-old authentication bypass vulnerability discovered in the phpBB forum software allows an attacker to log in as any user, including administrators. [...]

Read the original article