Phpbb Group vulnerabilities

Products

• Phpbb 81
• Phpbb-auction 4
• Advanced Guestbook 3
• Toplist 2

Newest

• phpbb group phpbb ** DISPUTED ** PHP remote file inclusion vulnerability in includes/usercp_register.php in phpBB... CVE-2007-1695 Disputed 10.0 HighMarch 27, 2007
• phpbb group advanced guestbook SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote... CVE-2006-7077 6.8 MediumFebruary 27, 2007
• phpbb group advanced guestbook Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB... CVE-2006-7076 4.3 MediumFebruary 27, 2007
• phpbb group phpbb phpBB 2.0.20 does not verify user-specified input variable types before being passed to type... CVE-2006-2219 5.0 MediumFebruary 8, 2007
• phpbb group phpbb Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote... CVE-2006-6841 Fix available 10.0 HighDecember 31, 2006
• phpbb group phpbb Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors... CVE-2006-6840 Fix available 10.0 HighDecember 31, 2006
• phpbb group phpbb Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors... CVE-2006-6839 Fix available 10.0 HighDecember 31, 2006
• phpbb group phpbb Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.21 allows remote authenticated users... CVE-2006-6508 Fix available 6.0 MediumDecember 14, 2006
• phpbb group phpbb Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php)... CVE-2006-6421 Public exploit EPSS 15.6% 6.0 MediumDecember 10, 2006
• phpbb group phpbb ** DISPUTED ** PHP remote file inclusion vulnerability in groupcp.php in phpBB 2.0.10 and... CVE-2006-5435 Disputed 7.5 HighOctober 20, 2006
• phpbb group phpbb PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic... CVE-2006-5209 Public exploit 7.5 HighOctober 9, 2006
• phpbb group vitrax premodded phpbb PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded... CVE-2006-4779 Public exploit 7.5 HighSeptember 14, 2006
• phpbb group phpbb phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated... CVE-2006-4758 Fix available 4.6 MediumSeptember 13, 2006
• phpbb group phpbb usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to... CVE-2006-4450 Public exploit 5.1 MediumAugust 30, 2006
• phpbb group phpbb-auction Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute... CVE-2006-3940 Public exploit 7.5 HighJuly 31, 2006
• phpbb group phpbb ** DISPUTED ** PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote... CVE-2006-2865 Public exploitDisputed 7.5 HighJune 6, 2006
• phpbb group phpbb SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to... CVE-2006-2360 Public exploit 7.5 HighMay 15, 2006
• phpbb group phpbb Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote... CVE-2006-2359 Public exploit 4.3 MediumMay 15, 2006
• phpbb group phpbb-auction PHP remote file inclusion vulnerability in auction\auction_common.php in Auction mod 1.3m for... CVE-2006-2245 Public exploit 6.8 MediumMay 9, 2006
• phpbb group advanced guestbook PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0... CVE-2006-2152 Public exploit 7.5 HighMay 3, 2006
• phpbb group toplist PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when... CVE-2006-2151 Public exploit EPSS 11.2% 7.5 HighMay 3, 2006
• phpbb group toplist PHP remote file inclusion vulnerability in top/list.php in phpBB TopList 1.3.8 and earlier allows... CVE-2006-2150 6.4 MediumMay 3, 2006
• phpbb group phpbb PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for... CVE-2006-2134 Public exploit 5.1 MediumMay 2, 2006
• phpbb group phpbb Unspecified vulnerability in phpBB allows remote authenticated users with Administration Panel... CVE-2006-1896 Fix available 6.0 MediumApril 20, 2006
• phpbb group phpbb Direct static code injection vulnerability in includes/template.php in phpBB allows remote... CVE-2006-1895 6.5 MediumApril 20, 2006
• phpbb group phpbb Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.19 allow remote attackers to... CVE-2006-1775 4.3 MediumApril 13, 2006
• phpbb group phpbb Cross-site scripting (XSS) vulnerability in profile.php in phpBB 2.0.19 allows remote attackers... CVE-2006-1603 4.3 MediumApril 4, 2006
• phpbb group phpbb The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space)... CVE-2006-0632 6.4 MediumFebruary 10, 2006
• phpbb group phpbb Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.19, when Link to off-site Avatar or... CVE-2006-0438 5.0 MediumFebruary 6, 2006
• phpbb group phpbb Cross-site scripting (XSS) vulnerability in admin_smilies.php in phpBB 2.0.19 allows remote... CVE-2006-0437 4.3 MediumFebruary 6, 2006
• phpbb group phpbb phpBB 2.0.19 and earlier allows remote attackers to cause a denial of service (application crash)... CVE-2006-0450 Public exploit 5.0 MediumJanuary 27, 2006
• phpbb group phpbb Cross-site scripting (XSS) vulnerability in phpBB 2.0.19, when "Allowed HTML tags" is enabled,... CVE-2006-0063 4.3 MediumJanuary 5, 2006
• phpbb group phpbb A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit... CVE-2005-3537 Fix available 5.0 MediumDecember 22, 2005
• phpbb group phpbb SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary... CVE-2005-3536 Fix available 7.5 HighDecember 22, 2005
• phpbb group phpbb admin/admin_disallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path... CVE-2005-4358 5.0 MediumDecember 20, 2005
• phpbb group phpbb Cross-site scripting (XSS) vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled,... CVE-2005-4357 2.6 LowDecember 20, 2005
• phpbb group phpbb phpBB 2.0.18 allows remote attackers to obtain sensitive information via a large SQL query, which... CVE-2005-3799 5.0 MediumNovember 24, 2005
• phpbb group phpbb usercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and... CVE-2005-3420 Fix available 7.5 HighNovember 1, 2005
• phpbb group phpbb SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to... CVE-2005-3419 Fix available 7.5 HighNovember 1, 2005
• phpbb group phpbb Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.17 and earlier allow remote... CVE-2005-3418 Fix available 4.3 MediumNovember 1, 2005
• phpbb group phpbb phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote... CVE-2005-3417 Fix available 7.5 HighNovember 1, 2005
• phpbb group phpbb phpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not... CVE-2005-3416 Fix available 7.5 HighNovember 1, 2005
• phpbb group phpbb phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister... CVE-2005-3415 Fix available 7.5 HighNovember 1, 2005
• phpbb group phpbb Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows... CVE-2005-3310 Fix available 3.5 LowOctober 25, 2005
• phpbb group phpbb Cross-site scripting (XSS) vulnerability in phpBB 2.0.16 allows remote attackers to inject... CVE-2005-2161 Fix available 4.3 MediumJuly 6, 2005
• phpbb group phpbb PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows... CVE-2005-2086 Public exploit EPSS 85.4% 7.5 HighJune 30, 2005
• phpbb group phpbb The bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before 2.0.15, as... CVE-2005-1193 Public exploit EPSS 16.4% 7.5 HighMay 16, 2005
• phpbb group phpbb Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote... CVE-2005-1290 4.3 MediumApril 26, 2005
• phpbb group phpbb-auction auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain... CVE-2005-1235 5.0 MediumApril 24, 2005
• phpbb group phpbb-auction Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute... CVE-2005-1234 5.0 MediumApril 24, 2005
• Show olderLoading…