-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIA Semantic Attack on Google Gemini - Read the Latest Research
A Semantic Attack on Google Gemini - Read the Latest Research
Miggo AI
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| phpbb/phpbb | composer | < 3.0.5 | 3.0.5 |
Miggo AIRoot Cause AnalysisThe patch adds database checks to enforce forum_id validation specifically for global announcements. The vulnerability stemmed from using unverified forum_id parameters in posting.php when handling posts/topics. The commit introduces SQL queries to retrieve the actual forum_id from TOPICS_TABLE/POSTS_TABLE, overriding the supplied value. This indicates the original code lacked these checks, making the forum_id parameter vulnerable to manipulation in global announcement contexts.