Browse CVEs

HIGH 7.5 CVE-2005-3416 phpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not been called to handle a session, allows remote atta… Phpbb Patch available Fix from $1,9502005-11-01 HIGH 7.5 CVE-2005-3417 phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass security… Phpbb Patch available Fix from $1,9502005-11-01 HIGH 7.5 CVE-2005-3419 SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL commands via the signature_bbcode… Phpbb Patch available Fix from $1,9502005-11-01 HIGH 7.5 CVE-2005-3420 usercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and execute PHP code via the signature_bbcode_uid parameter… Phpbb Patch available Fix from $1,9502005-11-01 HIGH 7.5 CVE-2005-2086EPSS 85% PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code. Phpbb Patch available Fix from $1,9502005-07-05 HIGH 7.5 CVE-2005-1193EPSS 16% The bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, privmsg.php, and other scripts… Phpbb Patch available Fix from $1,9502005-05-16 HIGH 7.5 CVE-2005-0614EPSS 8% sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie. Phpbb Mitigation only Fix from $1,9502005-05-02 HIGH 7.5 CVE-2005-1114 Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands v… Phpbb No fix yet Fix from $1,9502005-05-02 HIGH 7.5 CVE-2005-1196 SQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote attackers to obtain sensitive information and execute SQL … Phpbb Mitigation only Fix from $1,9502005-05-02 MEDIUM 5.0 CVE-2005-0659 phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP … Phpbb No fix yet Fix from $1,6002005-05-02 MEDIUM 5.0 CVE-2005-0871 calendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive … Phpbb No fix yet Fix from $1,6002005-05-02 MEDIUM 5.0 CVE-2005-1234 Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to auction_r… Phpbb Auction Patch available Fix from $1,6002005-05-02 MEDIUM 5.0 CVE-2005-1235 auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, whic… Phpbb Auction Patch available Fix from $1,6002005-05-02 HIGH 7.5 CVE-2005-1047 Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authentic… Phpbb Mitigation only Fix from $1,9502005-04-07 MEDIUM 6.4 CVE-2005-0259 phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing … Phpbb Patch available Fix from $1,6002005-03-14 MEDIUM 5.0 CVE-2005-0258 Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly other versions, with gallery av… Phpbb Patch available Fix from $1,6002005-03-14 MEDIUM 5.0 CVE-2005-0603 viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regula… Phpbb Patch available Fix from $1,6002005-02-28 HIGH 7.5 CVE-2004-1535EPSS 6% PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by … Phpbb Mitigation only Fix from $1,9502004-12-31 HIGH 7.5 CVE-2004-2350 SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the se… Phpbb Patch available Fix from $1,9502004-12-31 MEDIUM 5.0 CVE-2004-2054 CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML cont… Phpbb No fix yet Fix from $1,6002004-12-31 MEDIUM 6.8 CVE-2004-0339 Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script … Phpbb Patch available Fix from $1,6002004-11-23 HIGH 7.5 CVE-2004-1315EPSS 72% viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows … Phpbb Patch available Fix from $1,9502004-11-12 MEDIUM 6.8 CVE-2004-0730 Multiple cross-site scripting (XSS) vulnerabilities in PhpBB 2.0.8 allow remote attackers to inject arbitrary web script or HTML via (1) the cat_titl… Phpbb Mitigation only Fix from $1,6002004-07-27 MEDIUM 5.0 CVE-2004-0729 PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid (1) category_rows parameter to index.php, (2) faq parameter to faq.p… Phpbb Mitigation only Fix from $1,6002004-07-27 HIGH 7.5 CVE-2004-1943 PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via… Phpbb Patch available Fix from $1,9502004-04-19 MEDIUM 5.0 CVE-2004-1950 phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses. Phpbb Patch available Fix from $1,6002004-04-19 HIGH 7.5 CVE-2003-1244 SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force user passwords and possibly gain … Phpbb Patch available Fix from $1,9502003-12-31 MEDIUM 6.8 CVE-2003-1373 Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. (dot d… Phpbb Mitigation only Fix from $1,6002003-12-31 HIGH 7.5 CVE-2003-1216 SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the se… Phpbb Patch available Fix from $1,9502003-11-27 MEDIUM 6.8 CVE-2003-0484 Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topic_id parameter. Phpbb Mitigation only Fix from $1,6002003-08-07