Skip to content

Phpbb Group vulnerabilities

Products

Newest

phpbb group phpbbSQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote...CVE-2005-1196Public exploit7.5 HighApril 21, 2005
phpbb group phpbbCross-site scripting (XSS) vulnerability in the Calendar module for phpBB allow remote attackers...CVE-2005-11164.3 MediumApril 16, 2005
phpbb group phpbb, smartor photo album +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow...CVE-2005-11154.3 MediumApril 16, 2005
phpbb group phpbb, smartor photo album +1 moreMultiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow...CVE-2005-11147.5 HighApril 16, 2005
phpbb group plusMultiple cross-site scripting (XSS) vulnerabilities in PhpBB Plus 1.52 and earlier allow remote...CVE-2005-11134.3 MediumApril 16, 2005
phpbb group phpbbMeilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files...CVE-2005-10477.5 HighApril 7, 2005
phpbb group phpbbCross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1...CVE-2005-0872Public exploit4.3 MediumMarch 26, 2005
phpbb group phpbbcalendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS...CVE-2005-08715.0 MediumMarch 26, 2005
phpbb group phpbbCross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote...CVE-2005-06734.3 MediumMarch 7, 2005
phpbb group phpbbphpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct...CVE-2005-06595.0 MediumMarch 7, 2005
phpbb group phpbbsessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges...CVE-2005-0614Public exploit7.5 HighMarch 3, 2005
phpbb group phpbbviewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information...CVE-2005-0603Public exploit5.0 MediumFebruary 28, 2005
phpbb group phpbbphpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled,...CVE-2005-02596.4 MediumFebruary 22, 2005
phpbb group phpbbDirectory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB...CVE-2005-02585.0 MediumFebruary 22, 2005
phpbb group phpbbSQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to...CVE-2004-2350Public exploit7.5 HighDecember 31, 2004
phpbb group phpbbCRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP...CVE-2004-20545.0 MediumDecember 31, 2004
phpbb group phpbbCross-site scripting (XSS) vulnerability in phpBB 2.0.6d and earlier allows remote attackers to...CVE-2004-18094.3 MediumDecember 31, 2004
phpbb group phpbbPHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB...CVE-2004-1535Public exploit7.5 HighDecember 31, 2004
phpbb group phpbbMultiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote...CVE-2004-2130Public exploit4.3 MediumDecember 23, 2004
phpbb group phpbbviewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when...CVE-2004-1315Public exploitEPSS 72.5%7.5 HighNovember 12, 2004
phpbb group phpbbMultiple cross-site scripting (XSS) vulnerabilities in PhpBB 2.0.8 allow remote attackers to...CVE-2004-07306.8 MediumJuly 23, 2004
phpbb group phpbbPhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid (1)...CVE-2004-07295.0 MediumJuly 23, 2004
phpbb group phpbbCross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote...CVE-2004-20554.3 MediumJuly 19, 2004
phpbb group phpbbphpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header,...CVE-2004-19505.0 MediumApril 19, 2004
phpbb group phpbbPHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8...CVE-2004-1943Public exploit7.5 HighApril 19, 2004
phpbb group phpbbCross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier,...CVE-2004-03396.8 MediumMarch 18, 2004
phpbb group phpbbDirectory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote...CVE-2003-13736.8 MediumDecember 31, 2003
phpbb group phpbbSQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote...CVE-2003-1244Public exploit7.5 HighDecember 31, 2003
phpbb group phpbbSQL injection vulnerability in groupcp.php for phpBB 2.0.6 and earlier allows group moderators to...CVE-2003-12154.6 MediumDecember 29, 2003
phpbb group phpbbSQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to...CVE-2003-1216Public exploit7.5 HighNovember 27, 2003
phpbb group phpbbSQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers...CVE-2003-0486Public exploit5.0 MediumJune 28, 2003
phpbb group phpbbCross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to...CVE-2003-04846.8 MediumJune 28, 2003
phpbb group phpbbadmin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly...CVE-2002-153710.0 HighMarch 31, 2003
phpbb group phpbbSQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative...CVE-2002-2176Public exploit10.0 HighDecember 31, 2002
phpbb group phpbbCross-site scripting (XSS) vulnerability in viewtopic.php in phpBB 2.0.3 allows remote attackers...CVE-2002-18944.3 MediumDecember 31, 2002
phpbb group phpbbinstall.php in phpBB 2.0 through 2.0.1, when "allow_url_fopen" and "register_globals" variables...CVE-2002-17075.0 MediumDecember 31, 2002
phpbb group phpbbCross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute...CVE-2002-0902Public exploit7.5 HighAugust 31, 2002
phpbb group phpbbdb.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary...CVE-2002-047310.0 HighAugust 12, 2002
phpbb group phpbbphpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU...CVE-2002-05335.0 MediumJune 11, 2002
phpbb group phpbbCross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute...CVE-2002-04755.1 MediumJune 11, 2002
phpbb group phpbbSQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to...CVE-2001-14827.5 HighDecember 31, 2001
phpbb group phpbbSQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated...CVE-2001-1472Public exploit4.6 MediumAugust 3, 2001