Lucene search
+L

CVE-2006-0438

🗓️ 06 Feb 2006 22:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

Cross-site request forgery vulnerability in phpBB 2.0.19 allows unauthorized actions via user profil

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cvelist
CVE-2006-0438
6 Feb 200622:00
cvelist
euvd
EUVD-2006-0445
7 Oct 202500:30
euvd
nvd
CVE-2006-0438
6 Feb 200622:02
nvd
packetstorm
phpBB2.0.19.txt
6 Feb 200600:00
packetstorm
prion
Cross site request forgery (csrf)
6 Feb 200622:02
prion
securityvulns
[Full-disclosure] phpBB 2.0.19 Cross Site Request Forgeries and XSS Admin
3 Feb 200600:00
securityvulns
ubuntucve
CVE-2006-0438
6 Feb 200622:02
ubuntucve
NVD
Node
OR
phpbb_groupphpbbMatch2.0.6c
phpbb_groupphpbbMatch2.0.6d
phpbb_groupphpbbMatch2.0.7a
phpbb_groupphpbbMatch2.0.8a
phpbb_groupphpbbMatch2.0.10
phpbb_groupphpbbMatch2.0.11
phpbb_groupphpbbMatch2.0.12
phpbb_groupphpbbMatch2.0.13
phpbb_groupphpbbMatch2.0.14
phpbb_groupphpbbMatch2.0.15
phpbb_groupphpbbMatch2.0.16
phpbb_groupphpbbMatch2.0.17
phpbb_groupphpbbMatch2.0.18
phpbb_groupphpbbMatch2.0.19
phpbb_groupphpbbMatch2.0_beta1
phpbb_groupphpbbMatch2.0_rc1
phpbb_groupphpbbMatch2.0_rc2
phpbb_groupphpbbMatch2.0_rc3
phpbb_groupphpbbMatch2.0_rc4
ParameterPositionPathDescriptionCWE
sidquery paramadmin/admin_users.phpCSRF via admin user actions when SID is present in the URL
tquery parammodcp.phpCSRF via moderator control panel actions when SID is present in the URL
modequery parammodcp.phpCSRF via moderator control panel actions when SID is present in the URL
sidquery parammodcp.phpCSRF via moderator control panel actions when SID is present in the URL
modequery paramadmin/admin_smilies.phpCSRF/XSS vector using admin smilies management when user-supplied parameters are processed
smile_codequery paramadmin/admin_smilies.phpCSRF/XSS vector using admin smilies management when user-supplied parameters are processed
smile_urlquery paramadmin/admin_smilies.phpCSRF/XSS vector using admin smilies management when user-supplied parameters are processed
smile_emotionquery paramadmin/admin_smilies.phpCSRF/XSS vector using admin smilies management when user-supplied parameters are processed

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 22:20Current
6.8Medium risk
Vulners AI Score6.8
CVSS 25
EPSS0.02485
48