Vulnerability index

Browse CVEs

69 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Phpbb MEDIUM 5.0
CVE-2003-0486

SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter.

Fix: after 2.0.5
Fix from $1,600 2003-08-07
Phpbb HIGH 10.0
CVE-2002-1537

admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields s…

Patch available
Fix from $1,950 2003-03-31
Phpbb HIGH 10.0
CVE-2002-2176

SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the user_level parameter in the User Profil…

Patch available
Fix from $1,950 2002-12-31
Phpbb MEDIUM 5.0
CVE-2002-1707

install.php in phpBB 2.0 through 2.0.1, when "allow_url_fopen" and "register_globals" variables are set to "on", allows remote attackers to execute a…

Mitigation only
Fix from $1,600 2002-12-31
Phpbb HIGH 7.5
CVE-2002-0902EPSS 7%

Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// …

Patch available
Fix from $1,950 2002-10-04
Phpbb HIGH 10.0
CVE-2002-0473EPSS 5%

db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path param…

Patch available
Fix from $1,950 2002-08-12
Phpbb MEDIUM 5.1
CVE-2002-0475

Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the…

Mitigation only
Fix from $1,600 2002-08-12
Phpbb MEDIUM 5.0
CVE-2002-0533

phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 chara…

Patch available
Fix from $1,600 2002-08-12
Phpbb HIGH 7.5
CVE-2001-1482

SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby variable.

Mitigation only
Fix from $1,950 2001-12-31