CVE-2005-3416

CVE-2005-3416 affects phpBB 2.0.17 and earlier versions, allowing remote attackers to bypass security checks when register_globals is enabled and session_start is not called. Attackers can exploit this by manipulating $_SESSION and $HTTP_SESSION_VARS to be strings instead of arrays, causing an array_merge function to fail. This vulnerability has a CVSS score of 7.5, indicating high severity with potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat level.