Skip to content
Noroxi

phpbb group records

93 published records for vendor phpbb group.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 2.2%
Pre-auth RCE
28
With a fix record
17.2%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    93 records
    • CVE-2005-2086
      56Plan

      PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code.

      HighCVSS 7.5WeaponizedEPSS 85%

      phpbb group · phpbbJul 5, 2005

    • CVE-2004-1315
      52Plan

      viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, whic

      HighCVSS 7.5WeaponizedEPSS 72%

      phpbb group · phpbbNov 12, 2004

    • CVE-2002-0473
      42Plan

      db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_p

      CriticalCVSS 10.0No exploitEPSS 5%

      phpbb group · phpbbAug 12, 2002

    • CVE-2002-2176
      41Plan

      SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the user_level parameter in the Us

      CriticalCVSS 10.0Proof of conceptEPSS 3%

      phpbb group · phpbbDec 31, 2002

    • CVE-2002-1537
      41Plan

      admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form

      CriticalCVSS 10.0No exploitEPSS 2%

      phpbb group · phpbbMar 31, 2003

    • CVE-2007-1695
      41Plan

      PHP remote file inclusion vulnerability in includes/usercp_register.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP cod

      CriticalCVSS 10.0No exploitEPSS 2%

      phpbb group · phpbbMar 26, 2007

    • CVE-2006-6840
      40Plan

      Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."

      CriticalCVSS 10.0No exploitEPSS 2%

      phpbb group · phpbbDec 31, 2006

    • CVE-2006-6839
      40Plan

      Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redirection tar

      CriticalCVSS 10.0No exploitEPSS 2%

      phpbb group · phpbbDec 31, 2006

    • CVE-2006-6841
      40Plan

      Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors.

      CriticalCVSS 10.0No exploitEPSS 2%

      phpbb group · phpbbDec 31, 2006

    • CVE-2005-1193
      35Monitor

      The bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, privmsg.php, and othe

      HighCVSS 7.5Proof of conceptEPSS 16%

      phpbb group · phpbbMay 16, 2005

    • CVE-2006-2151
      33Monitor

      PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enabled, allows remote a

      HighCVSS 7.5Proof of conceptEPSS 11%

      phpbb group · phpbb toplistMay 3, 2006

    • CVE-2006-2152
      33Monitor

      PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when register_globals is enable

      HighCVSS 7.5Proof of conceptEPSS 8%

      phpbb group · phpbb advanced guestbookMay 3, 2006

    • CVE-2005-0614
      32Monitor

      sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie.

      HighCVSS 7.5Proof of conceptEPSS 8%

      phpbb group · phpbbMay 2, 2005

    • CVE-2002-0902
      32Monitor

      Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a

      HighCVSS 7.5Proof of conceptEPSS 7%

      phpbb group · phpbbOct 4, 2002

    • CVE-2004-1535
      32Monitor

      PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP

      HighCVSS 7.5Proof of conceptEPSS 6%

      phpbb group · phpbbDec 31, 2004

    • CVE-2006-4779
      31Monitor

      PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier allows remote attack

      HighCVSS 7.5Proof of conceptEPSS 3%

      phpbb group · vitrax premodded phpbbSep 14, 2006

    • CVE-2006-2865
      31Monitor

      PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the pa

      HighCVSS 7.5Proof of conceptEPSS 3%

      phpbb group · phpbbJun 6, 2006

    • CVE-2004-1943
      31Monitor

      PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP

      HighCVSS 7.5Proof of conceptEPSS 3%

      phpbb group · phpbbApr 19, 2004

    • CVE-2005-3415
      31Monitor

      phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GET/POST

      HighCVSS 7.5No exploitEPSS 2%

      phpbb group · phpbbNov 1, 2005

    • CVE-2005-3420
      31Monitor

      usercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and execute PHP code via the signature_bbcode_uid

      HighCVSS 7.5No exploitEPSS 2%

      phpbb group · phpbbNov 1, 2005

    • CVE-2005-3417
      31Monitor

      phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass

      HighCVSS 7.5No exploitEPSS 2%

      phpbb group · phpbbNov 1, 2005

    • CVE-2005-3416
      31Monitor

      phpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not been called to handle a session, allows re

      HighCVSS 7.5No exploitEPSS 2%

      phpbb group · phpbbNov 1, 2005

    • CVE-2006-5209
      31Monitor

      PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used

      HighCVSS 7.5Proof of conceptEPSS 2%

      phpbb group · phpbbOct 10, 2006

    • CVE-2005-1047
      31Monitor

      Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote

      HighCVSS 7.5No exploitEPSS 2%

      phpbb group · phpbbApr 7, 2005

    • CVE-2005-1196
      31Monitor

      SQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote attackers to obtain sensitive information and exe

      HighCVSS 7.5Proof of conceptEPSS 2%

      phpbb group · phpbbMay 2, 2005