Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpbb group phpbb vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2006-5209
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and previous versions, as used in phpBB 2.0 up to 2.0.21, allows remote malicious users to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Phpbb Group Phpbb 2.0Phpbb Group Phpbb 2.0.15Phpbb Group Phpbb 2.0.16Phpbb Group Phpbb 2.0.3Phpbb Group Phpbb 2.0.4Phpbb Group Phpbb 2.0.5Phpbb Group Phpbb 2.0.8aPhpbb Group Phpbb 2.0.9Phpbb Group Phpbb 2.0.11Phpbb Group Phpbb 2.0.12Phpbb Group Phpbb 2.0.19Phpbb Group Phpbb 2.0.2Phpbb Group Phpbb 2.0.6dPhpbb Group Phpbb 2.0.7Phpbb Group Phpbb 2.0 Rc2Phpbb Group Phpbb 2.0 Rc3Phpbb Group Phpbb 2.0.1Phpbb Group Phpbb 2.0.10Phpbb Group Phpbb 2.0.17Phpbb Group Phpbb 2.0.18Phpbb Group Phpbb 2.0.6Phpbb Group Phpbb 2.0.6c
NA
CVE-2006-0438
Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.19, when Link to off-site Avatar or bbcode (IMG) are enabled, allows remote malicious users to perform unauthorized actions as a logged in user via a link or IMG tag in a user profile, as demonstrated using links to (1)...
Phpbb Group Phpbb 2.0.13Phpbb Group Phpbb 2.0.14Phpbb Group Phpbb 2.0.3Phpbb Group Phpbb 2.0.4Phpbb Group Phpbb 2.0.5Phpbb Group Phpbb 2.0.8aPhpbb Group Phpbb 2.0.9Phpbb Group Phpbb 2.0.11Phpbb Group Phpbb 2.0.12Phpbb Group Phpbb 2.0.19Phpbb Group Phpbb 2.0.2Phpbb Group Phpbb 2.0.0Phpbb Group Phpbb 2.0.15Phpbb Group Phpbb 2.0.16Phpbb Group Phpbb 2.0.6Phpbb Group Phpbb 2.0.6cPhpbb Group Phpbb 2.0 Beta1Phpbb Group Phpbb 2.0 Rc1Phpbb Group Phpbb 2.0.7aPhpbb Group Phpbb 2.0.8Phpbb Group Phpbb 2.0 Rc4Phpbb Group Phpbb 2.0.1
NA
CVE-2006-0450
phpBB 2.0.19 and previous versions allows remote malicious users to cause a denial of service (application crash) by (1) registering many users through profile.php or (2) using search.php to search in a certain way that confuses the database.
Phpbb Group Phpbb 2.0.14Phpbb Group Phpbb 2.0.15Phpbb Group Phpbb 2.0.4Phpbb Group Phpbb 2.0.5Phpbb Group Phpbb 2.0.8aPhpbb Group Phpbb 2.0.9Phpbb Group Phpbb 2.0.0Phpbb Group Phpbb 2.0.16Phpbb Group Phpbb 2.0.17Phpbb Group Phpbb 2.0.6Phpbb Group Phpbb 2.0.6cPhpbb Group Phpbb 2.0 Beta1Phpbb Group Phpbb 2.0 Rc1Phpbb Group Phpbb 2.0.11Phpbb Group Phpbb 2.0.12Phpbb Group Phpbb 2.0.13Phpbb Group Phpbb 2.0.2Phpbb Group Phpbb 2.0.3Phpbb Group Phpbb 2.0.7aPhpbb Group Phpbb 2.0.8Phpbb Group Phpbb 2.0.1Phpbb Group Phpbb 2.0.10
NA
CVE-2006-0632
The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activation key ("validation ID") that is sent by e-mail when establishing a password, which makes it easier for remote malicious users to obtain the key and mo...
Phpbb Group Phpbb 2.0.0Phpbb Group Phpbb 2.0.15Phpbb Group Phpbb 2.0.16Phpbb Group Phpbb 2.0.6Phpbb Group Phpbb 2.0.6cPhpbb Group Phpbb 2.0 Beta1Phpbb Group Phpbb 2.0 Rc1Phpbb Group Phpbb 2.0.13Phpbb Group Phpbb 2.0.14Phpbb Group Phpbb 2.0.4Phpbb Group Phpbb 2.0.5Phpbb Group Phpbb 2.0.8aPhpbb Group Phpbb 2.0.9Phpbb Group Phpbb 2.0.1Phpbb Group Phpbb 2.0.10Phpbb Group Phpbb 2.0.17Phpbb Group Phpbb 2.0.18Phpbb Group Phpbb 2.0.6dPhpbb Group Phpbb 2.0.7Phpbb Group Phpbb 2.0 Rc2Phpbb Group Phpbb 2.0 Rc3Phpbb Group Phpbb 2.0.11
NA
CVE-2005-0614
sessions.php in phpBB 2.0.12 and previous versions allows remote malicious users to gain administrator privileges via the autologinid value in a cookie.
Phpbb Group Phpbb 1.0.0Phpbb Group Phpbb 2.0.1Phpbb Group Phpbb 2.0.10Phpbb Group Phpbb 2.0.6Phpbb Group Phpbb 2.0.6cPhpbb Group Phpbb 2.0 Beta1Phpbb Group Phpbb 2.0 Rc1Phpbb Group Phpbb 1.2.0Phpbb Group Phpbb 1.2.1Phpbb Group Phpbb 2.0.11Phpbb Group Phpbb 2.0.12Phpbb Group Phpbb 2.0.6dPhpbb Group Phpbb 2.0.7Phpbb Group Phpbb 2.0 Rc2Phpbb Group Phpbb 2.0 Rc3Phpbb Group Phpbb 2.0 Rc4Phpbb Group Phpbb 1.4.0Phpbb Group Phpbb 1.4.1Phpbb Group Phpbb 1.4.2Phpbb Group Phpbb 2.0.2Phpbb Group Phpbb 2.0.3Phpbb Group Phpbb 2.0.7a
NA
CVE-2004-1315
viewtopic.php in phpBB 2.x prior to 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote malicious users to execute arbitrary PHP code by double-encoding the highlight value so that special characters are insert...
Phpbb Group Phpbb 1.2.0Phpbb Group Phpbb 1.2.1Phpbb Group Phpbb 2.0.10Phpbb Group Phpbb 2.0.2Phpbb Group Phpbb 2.0.3Phpbb Group Phpbb 2.0.7aPhpbb Group Phpbb 2.0.8Phpbb Group Phpbb 2.0 Rc4Phpbb Group PhpbbPhpbb Group Phpbb 1.4.2Phpbb Group Phpbb 1.4.4Phpbb Group Phpbb 2.0.6Phpbb Group Phpbb 2.0.6cPhpbb Group Phpbb 2.0 Beta1Phpbb Group Phpbb 2.0 Rc1Phpbb Group Phpbb 1.4.0Phpbb Group Phpbb 1.4.1Phpbb Group Phpbb 2.0.4Phpbb Group Phpbb 2.0.5Phpbb Group Phpbb 2.0.8aPhpbb Group Phpbb 2.0.9Phpbb Group Phpbb 1.0.0
NA
CVE-2005-3415
phpBB 2.0.17 and previous versions allows remote malicious users to bypass protection mechanisms that deregister global variables by setting both a GET/POST/COOKIE (GPC) variable and a GLOBALS[] variable with the same name, which causes phpBB to unset the GLOBALS[] variable but n...
Phpbb Group Phpbb 2.0.11Phpbb Group Phpbb 2.0.12Phpbb Group Phpbb 2.0.3Phpbb Group Phpbb 2.0.4Phpbb Group Phpbb 2.0.8aPhpbb Group Phpbb 2.0.9Phpbb Group Phpbb 2.0.0Phpbb Group Phpbb 2.0.15Phpbb Group Phpbb 2.0.1Phpbb Group Phpbb 2.0.10Phpbb Group Phpbb 2.0.17Phpbb Group Phpbb 2.0.2Phpbb Group Phpbb 2.0.7aPhpbb Group Phpbb 2.0.8Phpbb Group Phpbb 2.0 Rc4Phpbb Group Phpbb 2.0.13Phpbb Group Phpbb 2.0.14Phpbb Group Phpbb 2.0.5Phpbb Group Phpbb 2.0.6Phpbb Group Phpbb 2.0.6cPhpbb Group Phpbb 2.0 Beta1Phpbb Group Phpbb 2.0 Rc1
NA
CVE-2005-3416
phpBB 2.0.17 and previous versions, when register_globals is enabled and the session_start function has not been called to handle a session, allows remote malicious users to bypass security checks by setting the $_SESSION and $HTTP_SESSION_VARS variables to strings instead of arr...
Phpbb Group Phpbb 2.0.0Phpbb Group Phpbb 2.0.1Phpbb Group Phpbb 2.0.16Phpbb Group Phpbb 2.0.17Phpbb Group Phpbb 2.0.2Phpbb Group Phpbb 2.0.7Phpbb Group Phpbb 2.0.7aPhpbb Group Phpbb 2.0 Rc3Phpbb Group Phpbb 2.0 Rc4Phpbb Group Phpbb 2.0.14Phpbb Group Phpbb 2.0.15Phpbb Group Phpbb 2.0.6cPhpbb Group Phpbb 2.0.6dPhpbb Group Phpbb 2.0 Rc1Phpbb Group Phpbb 2.0 Rc2Phpbb Group Phpbb 2.0.10Phpbb Group Phpbb 2.0.11Phpbb Group Phpbb 2.0.3Phpbb Group Phpbb 2.0.4Phpbb Group Phpbb 2.0.8Phpbb Group Phpbb 2.0.8aPhpbb Group Phpbb 2.0.12
NA
CVE-2005-3417
phpBB 2.0.17 and previous versions, when the register_long_arrays directive is disabled, allows remote malicious users to modify global variables and bypass security mechanisms because PHP does not define the associated HTTP_* variables.
Phpbb Group Phpbb 2.0.14Phpbb Group Phpbb 2.0.15Phpbb Group Phpbb 2.0.6Phpbb Group Phpbb 2.0.6cPhpbb Group Phpbb 2.0 Beta1Phpbb Group Phpbb 2.0 Rc1Phpbb Group Phpbb 2.0.11Phpbb Group Phpbb 2.0.12Phpbb Group Phpbb 2.0.13Phpbb Group Phpbb 2.0.4Phpbb Group Phpbb 2.0.5Phpbb Group Phpbb 2.0.8aPhpbb Group Phpbb 2.0.9Phpbb Group Phpbb 2.0.0Phpbb Group Phpbb 2.0.16Phpbb Group Phpbb 2.0.17Phpbb Group Phpbb 2.0.6dPhpbb Group Phpbb 2.0.7Phpbb Group Phpbb 2.0 Rc2Phpbb Group Phpbb 2.0 Rc3Phpbb Group Phpbb 2.0.1Phpbb Group Phpbb 2.0.10
NA
CVE-2005-3418
Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.17 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) error_msg parameter to usercp_register.php, (2) forward_page parameter to login.php, and (3) list_cat paramete...
Phpbb Group Phpbb 2.0.11Phpbb Group Phpbb 2.0.12Phpbb Group Phpbb 2.0.3Phpbb Group Phpbb 2.0.4Phpbb Group Phpbb 2.0.8Phpbb Group Phpbb 2.0.8aPhpbb Group Phpbb 2.0.1Phpbb Group Phpbb 2.0.10Phpbb Group Phpbb 2.0.17Phpbb Group Phpbb 2.0.2Phpbb Group Phpbb 2.0.7Phpbb Group Phpbb 2.0.7aPhpbb Group Phpbb 2.0 Rc4Phpbb Group Phpbb 2.0.13Phpbb Group Phpbb 2.0.14Phpbb Group Phpbb 2.0.5Phpbb Group Phpbb 2.0.6Phpbb Group Phpbb 2.0.9Phpbb Group Phpbb 2.0 Beta1Phpbb Group Phpbb 2.0.0Phpbb Group Phpbb 2.0.15Phpbb Group Phpbb 2.0.16
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook