Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
phpbb vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2006-7100
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Insert User 0.1.2 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Phpbb Insert User
1 EDB exploit
4.3
CVSSv2
CVE-2006-7076
Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote malicious users to inject arbitrary web script or HTML via the entry parameter. NOTE: this issue might be resultant from SQL injection.
Phpbb Group Phpbb Advanced Guestbook 2.4.0
6.8
CVSSv2
CVE-2006-7077
SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote malicious users to execute arbitrary SQl commands via the entry parameter.
Phpbb Group Phpbb Advanced Guestbook 2.4.0
6.8
CVSSv2
CVE-2006-7090
PHP remote file inclusion vulnerability in phpbb_security.php in phpBB Security 1.0.1 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the php_root_path parameter.
Phpbb Security Phpbb Security
5
CVSSv2
CVE-2007-1105
PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote malicious users to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Extreme Phpbb Extreme Phpbb 3.0.1
1 EDB exploit
6.8
CVSSv2
CVE-2007-1106
PHP remote file inclusion vulnerability in includes/functions_nomoketos_rules.php in the NoMoKeTos Rules 0.0.1 module for phpBB allows remote malicious users to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Nomoketos Rules Nomoketos Rules 0.0.1
1 EDB exploit
10
CVSSv2
CVE-2006-7032
PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and previous versions allows remote malicious users to execute arbitrary code via a URL in the phpbb_root_path parameter.
Tufat Flashbb
1 EDB exploit
7.5
CVSSv2
CVE-2007-1048
PHP remote file inclusion vulnerability in admin_rebuild_search.php in phpbb_wordsearch allows remote malicious users to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Phpbb Wordsearch Phpbb Wordsearch
5
CVSSv2
CVE-2006-2219
phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote malicious users to obtain sensitive information, as demonstrated by the (1) mode parameter to memberlist.php and the (2) highlight parameter to vi...
Phpbb Group Phpbb 2.0.20
5
CVSSv2
CVE-2006-2220
phpBB 2.0.20 does not properly verify user-specified input variables used as limits to SQL queries, which allows remote malicious users to obtain sensitive information via a negative LIMIT specification, as demonstrated by the start parameter to memberlist.php, which reveals the ...
Phpbb Phpbb 2.0.20
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
inject
CVE-2024-34001
CVE-2024-37018
LFI
CVE-2024-1275
CVE-2024-1086
CSRF
CVE-2024-31030
CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »