Browse CVEs

MEDIUM 5.0 CVE-2003-0486 SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter. Phpbb after 2.0.5 Fix from $1,6002003-08-07 HIGH 10.0 CVE-2002-1537 admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields s… Phpbb Patch available Fix from $1,9502003-03-31 HIGH 10.0 CVE-2002-2176 SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the user_level parameter in the User Profil… Phpbb Patch available Fix from $1,9502002-12-31 MEDIUM 5.0 CVE-2002-1707 install.php in phpBB 2.0 through 2.0.1, when "allow_url_fopen" and "register_globals" variables are set to "on", allows remote attackers to execute a… Phpbb Mitigation only Fix from $1,6002002-12-31 HIGH 7.5 CVE-2002-0902EPSS 7% Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// … Phpbb Patch available Fix from $1,9502002-10-04 HIGH 10.0 CVE-2002-0473EPSS 5% db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path param… Phpbb Patch available Fix from $1,9502002-08-12 MEDIUM 5.1 CVE-2002-0475 Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the… Phpbb Mitigation only Fix from $1,6002002-08-12 MEDIUM 5.0 CVE-2002-0533 phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 chara… Phpbb Patch available Fix from $1,6002002-08-12 HIGH 7.5 CVE-2001-1482 SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby variable. Phpbb Mitigation only Fix from $1,9502001-12-31