Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
phpbb vulnerabilities and exploits
(subscribe to this query)
685
VMScore
CVE-2006-7100
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Insert User 0.1.2 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Phpbb Insert User
1 EDB exploit
383
VMScore
CVE-2006-7076
Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote malicious users to inject arbitrary web script or HTML via the entry parameter. NOTE: this issue might be resultant from SQL injection.
Phpbb Group Phpbb Advanced Guestbook 2.4.0
605
VMScore
CVE-2006-7077
SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote malicious users to execute arbitrary SQl commands via the entry parameter.
Phpbb Group Phpbb Advanced Guestbook 2.4.0
605
VMScore
CVE-2006-7090
PHP remote file inclusion vulnerability in phpbb_security.php in phpBB Security 1.0.1 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the php_root_path parameter.
Phpbb Security Phpbb Security
685
VMScore
CVE-2007-1106
PHP remote file inclusion vulnerability in includes/functions_nomoketos_rules.php in the NoMoKeTos Rules 0.0.1 module for phpBB allows remote malicious users to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Nomoketos Rules Nomoketos Rules 0.0.1
1 EDB exploit
505
VMScore
CVE-2007-1105
PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote malicious users to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Extreme Phpbb Extreme Phpbb 3.0.1
1 EDB exploit
1000
VMScore
CVE-2006-7032
PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and previous versions allows remote malicious users to execute arbitrary code via a URL in the phpbb_root_path parameter.
Tufat Flashbb
1 EDB exploit
668
VMScore
CVE-2007-1048
PHP remote file inclusion vulnerability in admin_rebuild_search.php in phpbb_wordsearch allows remote malicious users to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Phpbb Wordsearch Phpbb Wordsearch
445
VMScore
CVE-2006-2220
phpBB 2.0.20 does not properly verify user-specified input variables used as limits to SQL queries, which allows remote malicious users to obtain sensitive information via a negative LIMIT specification, as demonstrated by the start parameter to memberlist.php, which reveals the ...
Phpbb Phpbb 2.0.20
445
VMScore
CVE-2006-2219
phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote malicious users to obtain sensitive information, as demonstrated by the (1) mode parameter to memberlist.php and the (2) highlight parameter to vi...
Phpbb Group Phpbb 2.0.20
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »