CVE-2005-3415

CVE-2005-3415 describes a vulnerability in phpBB 2.0.17 and earlier, where remote attackers can bypass global variable deregistration mechanisms. This is achieved by simultaneously setting a GET/POST/COOKIE variable and a GLOBALS[] variable with the same name, leading to the GLOBALS[] variable being unset while the GPC variable persists. With a CVSS score of 7.5 (High), this vulnerability has a low attack complexity and no authentication required, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.