phpbb Vulnerability Advisory Catalog

Total 61 security vulnerabilities recorded for phpbb software and firmware.

← Back to All Vendors
CVE-2008-6506 UNKNOWN
Component: phpbb

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de-activated accounts via unknown...

📅 2009-03-23
CVSS 5.0 Dossier →
CVE-2008-6314 UNKNOWN
Component: tag_board

SQL injection vulnerability in tag_board.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers to execute arbitrary SQL comman...

📅 2009-02-27
CVSS 7.5 Dossier →
CVE-2008-4125 UNKNOWN
Component: phpbb

The search function in phpBB 2.x provides a search_id value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially se...

📅 2008-09-18
CVSS 5.0 Dossier →
CVE-2008-3224 UNKNOWN
Component: phpbb

Unspecified vulnerability in phpBB before 3.0.1 has unknown impact and attack vectors related to "urls gone through redirect() being used within login...

📅 2008-07-18
CVSS 10.0 Dossier →
CVE-2008-1766 UNKNOWN
Component: phpbb

Multiple unspecified vulnerabilities in phpBB before 3.0.1 have unknown impact and attack vectors, related to "two minor security-related bugs."...

📅 2008-04-12
CVSS 10.0 Dossier →
CVE-2008-1512 UNKNOWN
Component: module_xs

Directory traversal vulnerability in admin/admin_xs.php in eXtreme Styles module (XS-Mod) 2.3.1 and 2.4.0 for phpBB allows remote attackers to include...

📅 2008-03-25
CVSS 7.5 Dossier →
CVE-2008-1171 UNKNOWN
Component: 123_flash_chat_module

Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a U...

📅 2008-03-05
CVSS 6.8 Dossier →
CVE-2008-0471 UNKNOWN
Component: phpbb

Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages (PM) as arbitrary us...

📅 2008-01-29
CVSS 4.3 Dossier →
CVE-2007-6223 UNKNOWN
Component: garage

SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL commands via the make_id parame...

📅 2007-12-04
CVSS 7.5 Dossier →
CVE-2007-5100 UNKNOWN
Component: phpbb_plus

Multiple PHP remote file inclusion vulnerabilities in phpBB Plus 1.53, and 1.53a before 20070922, when register_globals is enabled, allow remote attac...

📅 2007-09-26
CVSS 6.8 Dossier →
CVE-2007-4653 UNKNOWN
Component: phpbb

SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote attackers to execute arbitrary ...

📅 2007-09-04
CVSS 7.5 Dossier →
CVE-2007-3935 UNKNOWN
Component: supanav

PHP remote file inclusion vulnerability in link_main.php in the SupaNav 1.0.0 module for phpBB allows remote attackers to execute arbitrary PHP code v...

📅 2007-07-21
CVSS 9.3 Dossier →
CVE-2007-2858 UNKNOWN
Component: ip-tracking

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execut...

📅 2007-05-24
CVSS 6.5 Dossier →
CVE-2007-1961 UNKNOWN
Component: mutant

PHP remote file inclusion vulnerability in mutant_functions.php in the Mutant 0.9.2 portal for phpBB 2.2 allows remote attackers to execute arbitrary ...

📅 2007-04-11
CVSS 7.5 Dossier →
CVE-2006-7174 UNKNOWN
Component: dimension

PHP remote file inclusion vulnerability in includes/functions.php in the Dimension module of phpBB allows remote attackers to execute arbitrary PHP co...

📅 2007-03-21
CVSS 10.0 Dossier →
CVE-2006-7168 UNKNOWN
Component: phpbb

PHP remote file inclusion vulnerability in includes/not_mem.php in the Add Name module for PHP allows remote attackers to execute arbitrary PHP code v...

📅 2007-03-20
CVSS 7.5 Dossier →
CVE-2006-7148 UNKNOWN
Component: maluinfo

PHP remote file inclusion vulnerability in includes/bb_usage_stats.php in maluinfo 206.2.38 for Brazilian PHPBB allows remote attackers to execute arb...

📅 2007-03-07
CVSS 10.0 Dossier →
CVE-2006-7147 UNKNOWN
Component: import_tools

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier allows remote attackers to exec...

📅 2007-03-07
CVSS 6.8 Dossier →
CVE-2006-7100 UNKNOWN
Component: insert_user

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Insert User 0.1.2 and earlier allows remote attackers to execute a...

📅 2007-03-03
CVSS 6.8 Dossier →
CVE-2006-2220 UNKNOWN
Component: phpbb

phpBB 2.0.20 does not properly verify user-specified input variables used as limits to SQL queries, which allows remote attackers to obtain sensitive ...

📅 2007-02-08
CVSS 5.0 Dossier →
CVE-2007-0761 UNKNOWN
Component: ezboard_converter

PHP remote file inclusion vulnerability in config.php in phpBB ezBoard converter (ezconvert) 0.2 allows remote attackers to execute arbitrary PHP code...

📅 2007-02-06
CVSS 7.5 Dossier →
CVE-2006-6593 UNKNOWN
Component: amazonia_mod

PHP remote file inclusion vulnerability in zufallscodepart.php in AMAZONIA MOD for phpBB allows remote attackers to execute arbitrary PHP code via a U...

📅 2006-12-15
CVSS 7.5 Dossier →
CVE-2006-6459 UNKNOWN
Component: toplist

Cross-site scripting (XSS) vulnerability in toplist.php in PhpBB Toplist 1.3.7 allows remote attackers to inject arbitrary HTML or web script via the ...

📅 2006-12-11
CVSS 6.8 Dossier →
CVE-2006-5418 UNKNOWN
Component: searchindexer

PHP remote file inclusion vulnerability in archive/archive_topic.php in pbpbb archive for search engines (SearchIndexer) (aka phpBBSEI) for phpBB allo...

📅 2006-10-20
CVSS 6.8 Dossier →
Page 2 of 3 (61 Total Records)