Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpbb group phpbb 2.0.20 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2006-6839
Unspecified vulnerability in phpBB prior to 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redirection targets."
Phpbb Group Phpbb 1.2.4 Rc3Phpbb Group Phpbb 2.0.18Phpbb Group Phpbb 2.0.20Phpbb Group Phpbb 2.0.21
10
CVSSv2
CVE-2006-6841
Certain forms in phpBB prior to 2.0.22 lack session checks, which has unknown impact and remote attack vectors.
Phpbb Group Phpbb 2.0.18Phpbb Group Phpbb 2.0.21Phpbb Group Phpbb 1.2.4 Rc3Phpbb Group Phpbb 2.0.20
10
CVSSv2
CVE-2006-6840
Unspecified vulnerability in phpBB prior to 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."
Phpbb Group Phpbb 2.0.18Phpbb Group Phpbb 2.0.20Phpbb Group Phpbb 2.0.21Phpbb Group Phpbb 1.2.4 Rc3
5.1
CVSSv2
CVE-2006-4450
usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote malicious users to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request.
Phpbb Group Phpbb 2.0.20
5
CVSSv2
CVE-2006-2219
phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote malicious users to obtain sensitive information, as demonstrated by the (1) mode parameter to memberlist.php and the (2) highlight parameter to vi...
Phpbb Group Phpbb 2.0.20
7.5
CVSSv2
CVE-2006-5209
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and previous versions, as used in phpBB 2.0 up to 2.0.21, allows remote malicious users to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Phpbb Group Phpbb 2.0Phpbb Group Phpbb 2.0.15Phpbb Group Phpbb 2.0.16Phpbb Group Phpbb 2.0.3Phpbb Group Phpbb 2.0.4Phpbb Group Phpbb 2.0.5Phpbb Group Phpbb 2.0.8aPhpbb Group Phpbb 2.0.9Phpbb Group Phpbb 2.0.11Phpbb Group Phpbb 2.0.12Phpbb Group Phpbb 2.0.19Phpbb Group Phpbb 2.0.2Phpbb Group Phpbb 2.0.6dPhpbb Group Phpbb 2.0.7Phpbb Group Phpbb 2.0 Rc2Phpbb Group Phpbb 2.0 Rc3Phpbb Group Phpbb 2.0.1Phpbb Group Phpbb 2.0.10Phpbb Group Phpbb 2.0.17Phpbb Group Phpbb 2.0.18Phpbb Group Phpbb 2.0.6Phpbb Group Phpbb 2.0.6c
7.5
CVSSv2
CVE-2006-2865
PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote malicious users to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $pa...
Phpbb Group Phpbb 2.0.5Phpbb Group Phpbb 2.0.7aPhpbb Group Phpbb 2.0.20Phpbb Group Phpbb 2.0.8Phpbb Group Phpbb 2.0.11Phpbb Group Phpbb 2.0.1Phpbb Group Phpbb 2.0.13Phpbb Group Phpbb 2.0.16Phpbb Group Phpbb 2.0.3Phpbb Group Phpbb 2.0 Rc2Phpbb Group Phpbb 2.0Phpbb Group Phpbb 2.0 Rc1Phpbb Group Phpbb 2.0.19Phpbb Group Phpbb 2.0.4Phpbb Group Phpbb 2.0.12Phpbb Group Phpbb 2.0.9Phpbb Group Phpbb 2.0.7Phpbb Group Phpbb 2.0.8aPhpbb Group Phpbb 2.0.6dPhpbb Group Phpbb 2.0.2Phpbb Group Phpbb 2.0.14Phpbb Group Phpbb 2.0.10
6
CVSSv2
CVE-2006-6421
Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user.
Phpbb Group Phpbb 2.0.1Phpbb Group Phpbb 2.0.10Phpbb Group Phpbb 2.0.17Phpbb Group Phpbb 2.0.18Phpbb Group Phpbb 2.0.5Phpbb Group Phpbb 2.0.6Phpbb Group Phpbb 2.0.6cPhpbb Group Phpbb 2.0 Beta1Phpbb Group Phpbb 2.0 Rc1Phpbb Group Phpbb 2.0Phpbb Group Phpbb 2.0.0Phpbb Group Phpbb 2.0.15Phpbb Group Phpbb 2.0.16Phpbb Group Phpbb 2.0.3Phpbb Group Phpbb 2.0.4Phpbb Group Phpbb 2.0.8aPhpbb Group Phpbb 2.0.9Phpbb Group Phpbb 2.0.13Phpbb Group Phpbb 2.0.14Phpbb Group Phpbb 2.0.20Phpbb Group Phpbb 2.0.21Phpbb Group Phpbb 2.0.7a
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook