Lucene search
+L

2233 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 1:35 a.m.•12 views

CVE-2010-1630

Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in circumstances related to a "global announcement."...

7.5CVSS6.6AI score0.01227EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 1:35 a.m.•15 views

CVE-2010-1627

feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows remote attackers to bypass intended access restrictions via unspecified attack vectors related to permission settings on a private forum...

4.3CVSS6.9AI score0.01111EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/21 8:38 p.m.•15 views

CVE-2002-2346

phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses...

5CVSS7AI score0.01388EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/21 8:26 p.m.•13 views

CVE-2002-1894

Cross-site scripting XSS vulnerability in viewtopic.php in phpBB 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter...

4.3CVSS5.9AI score0.0196EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/21 7:39 p.m.•17 views

CVE-2006-5610

PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB phpbbfm 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

9.8CVSS7.9AI score0.01358EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/21 6:47 p.m.•20 views

CVE-2005-3537

A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by modifying certain parameters or other inputs...

5CVSS6.8AI score0.01417EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/11 5:53 p.m.•8 views

CVE-2025-32575

Cross-Site Request Forgery CSRF vulnerability in axew3 WP w3all phpBB wp-w3all-phpbb-integration allows Reflected XSS.This issue affects WP w3all phpBB: from n/a through = 2.9.9...

7.1CVSS7.2AI score0.00186EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/09 5:15 p.m.•16 views

CVE-2025-32575

Cross-Site Request Forgery CSRF vulnerability in axew3 WP w3all phpBB wp-w3all-phpbb-integration allows Reflected XSS.This issue affects WP w3all phpBB: from n/a through = 2.9.9...

7.1CVSS0.00186EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/09 4:09 p.m.•25 views

CVE-2025-32575 WordPress WP w3all phpBB Plugin <= 2.9.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in axew3 WP w3all phpBB wp-w3all-phpbb-integration allows Reflected XSS.This issue affects WP w3all phpBB: from n/a through = 2.9.9...

7.1CVSS0.00186EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/09 4:09 p.m.•60 views

CVE-2025-32575

CVE-2025-32575 affects the WordPress plugin WP w3all phpBB (axew3) for WordPress/WP-BB integration. Connected data indicates the issue is described as a Cross-Site Forgery to Stored Cross-Site Scripting (CSRF to S-SCRIPTING) vulnerability affecting WP w3all phpBB up to version 2.9.3. The CVE entr...

7.1CVSS7.2AI score0.00186EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/09 12:00 a.m.•9 views

WordPress plugin WP w3all phpBB 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

7.1CVSS7.2AI score0.00186EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•0 views

CVE-2025-32575: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in axew3 WP w3all phpBB wp-w3all-phpbb-integration allows Reflected XSS.This issue affects WP w3all phpBB: from n/a through = 2.9.9...

7.1CVSS5.8AI score0.00186EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/06 5:22 p.m.•26 views

CVE-2025-32274

Cross-Site Request Forgery CSRF vulnerability in axew3 WP w3all phpBB wp-w3all-phpbb-integration allows Cross Site Request Forgery.This issue affects WP w3all phpBB: from n/a through = 2.9.8...

4.3CVSS7.2AI score0.00151EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/04 4:15 p.m.•14 views

CVE-2025-32274

Cross-Site Request Forgery CSRF vulnerability in axew3 WP w3all phpBB wp-w3all-phpbb-integration allows Cross Site Request Forgery.This issue affects WP w3all phpBB: from n/a through = 2.9.8...

4.3CVSS0.00151EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/04 3:59 p.m.•23 views

CVE-2025-32274 WordPress w3all phpBB integration Plugin <= 2.9.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in axew3 WP w3all phpBB wp-w3all-phpbb-integration allows Cross Site Request Forgery.This issue affects WP w3all phpBB: from n/a through = 2.9.8...

4.3CVSS8.5AI score0.00151EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/04 3:59 p.m.•97 views

CVE-2025-32274

CVE-2025-32274 : CSRF vulnerability in the WordPress integration plugin WP w3all phpBB affecting versions up to and including 2.9.3. The initial description states a Cross-Site Request Forgery issue, and the connected records reference the same CVE-2025-32274 with a line noting “Cross-Site Reques...

4.3CVSS7.2AI score0.00151EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/04 3:59 p.m.•31 views

CVE-2025-32274 WordPress w3all phpBB integration Plugin <= 2.9.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in axew3 WP w3all phpBB wp-w3all-phpbb-integration allows Cross Site Request Forgery.This issue affects WP w3all phpBB: from n/a through = 2.9.8...

4.3CVSS0.00151EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/04 1:42 p.m.•17 views

WordPress w3all phpBB integration Plugin <= 2.9.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP w3all phpBB versions = 2.9.8...

4.3CVSS8.2AI score0.00151EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•0 views

CVE-2025-32274: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in axew3 WP w3all phpBB wp-w3all-phpbb-integration allows Cross Site Request Forgery.This issue affects WP w3all phpBB: from n/a through = 2.9.8...

4.3CVSS5.8AI score0.00151EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•11 views

WordPress plugin WP w3all phpBB 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

4.3CVSS5.9AI score0.00151EPSS
SaveExploits0References2
Rows per page
Query Builder