2416 matches found
phpBB < 3.3.17 - Authentication Bypass
phpBB before 3.3.17 contains an authentication bypass vulnerability in the login-link feature. By setting the authprovider query parameter to "apache", an unauthenticated attacker can bypass password verification and log in as any user, including administrators. The Apache auth provider trusts th...
CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure
CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - Advisory 06 - 25/02/05 Program: phpBB 2.0.12 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.12 & Lower versions Risk: Low Risk!! Impact: Full path disclosure -==phpBB 2.0.12 Full path disclosure==- Description phpB...
CVE-2026-48611-phpBB
CVE-2026-48611-phpBB Bypass de autenticación simple poc de bypass de autenticación; si quieres acceder a través del navegador, no olvides cambiar la variable USERAGENT en el script según lo que se muestre en tu navegador para que funcione. usa un editor de cookies para reemplazar el valor sid y u...
phpBB-CVE-2026-48611
ÚSALO BAJO TU PROPIO RIESGO. Esta herramienta se proporciona estrictamente para investigación de seguridad autorizada, pruebas de penetración y fines educativos. Solo ejecútala contra sistemas que poseas o para los que tengas permiso explícito y por escrito. El autor no es responsable ni se hace...
CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities
Neo Security Team NST® - Aviso 15 - 00/00/06 Programa: phpBB 2.0.15 Página principal: http://www.phpbb.com Versiones vulnerables: phpBB 2.0.15 y versiones anteriores Riesgo: ¡¡Alto riesgo!! Impacto: Múltiples vulnerabilidades DoS. Descripción phpBB es un paquete de foros de código abierto de alto...
CVE-2026-48611-EXPLOIT
CVE-2026-48611 – Exploit de Secuestro de Cuenta OAuth de phpBB Toma de control de cuenta no autenticada | CVSS 9.4 Crítico | Listo para usar 🔥 Lo que obtienes Exploit de Python totalmente funcional para CVE-2026-48611 Escáner masivo — comprueba miles de objetivos automáticamente Generador de...
nns-ctf-php-is-my-passion
Competition Introduction NNS CTF is a jeopardy styled CTF comp...
Exploit for CVE-2026-48611
USE AT YOUR OWN RISK. This tool is provided strictly for...
FreeBSD : phpBB -- multiple vulnerabilities (4d06b948-a323-11f1-a655-3497f65b111b)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4d06b948-a323-11f1-a655-3497f65b111b advisory. The phpBB Team reports: Changes since 3.3.16: Improper state verification in OAuth implementation...
CVE-2026-78293
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
EUVD-2026-66947
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
CVE-2026-78293 WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
CVE-2026-78293 WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
CVE-2026-78293
CVE-2026-78293 affects the WordPress plugin WP w3all phpBB (versions ≤ 3.0.6 ), where an unauthenticated Cross Site Scripting (XSS) vulnerability was identified. The issue was discovered by lanlv – HPT Vietnam Corporation and reported via Patchstack. The CVSS 3.1 score is 7.1 (HIGH) with vector A...
CVE-2026-78293: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
PT-2026-82466
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by lanlv - HPT Vietnam Coporation in WordPress Plugin WP w3all phpBB versions = 3.0.6...
CVE-2026-73998
Subscriber SQL Injection in WP w3all phpBB = 3.0.5 versions...
CVE-2026-73998
The WordPress WP w3all phpBB plugin (≤ 3.0.5) has a SQL injection vulnerability exploitable by authenticated subscribers with network access; no patch version or in-the-wild exploitation details are provided in the documents.