CVE-2026-78293

Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...

CVE-2026-78293 WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...

EUVD-2026-66947

Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...

CVE-2026-78293

CVE-2026-78293 affects the WordPress plugin WP w3all phpBB (versions ≤ 3.0.6 ), where an unauthenticated Cross Site Scripting (XSS) vulnerability was identified. The issue was discovered by lanlv – HPT Vietnam Corporation and reported via Patchstack. The CVSS 3.1 score is 7.1 (HIGH) with vector A...

phpBB < 3.3.17 - Authentication Bypass

phpBB before 3.3.17 contains an authentication bypass vulnerability in the login-link feature. By setting the authprovider query parameter to "apache", an unauthenticated attacker can bypass password verification and log in as any user, including administrators. The Apache auth provider trusts th...

CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure

CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - Advisory 06 - 25/02/05 प्रोग्राम: phpBB 2.0.12 होमपेज: http://www.phpbb.com असुरक्षित संस्करण: phpBB 2.0.12 और निचले संस्करण जोखिम: कम जोखिम!! प्रभाव: पूर्ण पथ प्रकटीकरण root@kitploit: -==phpBB 2.0.12 पूर्ण पथ प्रकटीकरण==- विवरण...

CVE-2026-48611-EXPLOIT

CVE-2026-48611 – phpBB OAuth Account Hijacking Exploit Nicht authentifizierte Kontenübernahme | CVSS 9.4 Kritisch | Einsatzbereit 🔥 Was Sie erhalten Voll funktionsfähiger Python-Exploit für CVE-2026-48611 Massen-Scanner – prüft automatisch tausende Ziele CSRF-Payload-Generator – erstellt HTML-Dat...

CVE-2026-48611-phpBB

CVE-2026-48611-phpBB تجاوز المصادقة إثبات مفهوم بسيط لتجاوز المصادقة. إذا أردت الوصول عبر المتصفح فلا تنسَ تغيير متغير USERAGENT في السكربت وفقًا لما يظهر في متصفحك حتى يعمل. استخدم محرر الكوكيز لاستبدال قيمة sid و u المتأثر: phpBB 3.3.16 وما دون + 4.0.0-a2 root@kitploit: phpbb python3 exploit.py...

CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities

Neo Security Team NST® - Advisory 15 - 00/00/06 Programma: phpBB 2.0.15 Homepage: http://www.phpbb.com Versioni Vulnerabili: phpBB 2.0.15 e versioni precedenti Rischio: Alto!! Impatto: Molteplici vulnerabilità DoS. Descrizione phpBB è un potente sistema di bacheca open source completamente...

WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by lanlv - HPT Vietnam Coporation in WordPress Plugin WP w3all phpBB versions = 3.0.6...

CVE-2026-73998

Subscriber SQL Injection in WP w3all phpBB = 3.0.5 versions...

CVE-2026-73998

The WordPress WP w3all phpBB plugin (≤ 3.0.5) has a SQL injection vulnerability exploitable by authenticated subscribers with network access; no patch version or in-the-wild exploitation details are provided in the documents.

EUVD-2026-63313

Subscriber SQL Injection in WP w3all phpBB = 3.0.5 versions...

CVE-2026-73998 WordPress WP w3all phpBB plugin <= 3.0.5 - SQL Injection vulnerability

Subscriber SQL Injection in WP w3all phpBB = 3.0.5 versions...

Insufficient Granularity of Access Control

Overview phpbb/phpbb is a Forum Software application. Affected versions of this package are vulnerable to Insufficient Granularity of Access Control due to improper verification of access permissions in the Administration Control Panel ACP. An attacker can obtain elevated privileges by modifying...

CVE-2026-48613

SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL queries. Only applies to phpBB forums that had been updated from versions prior to phpBB 3.3.8 and have not been updated ...

CVE-2026-48613

SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL queries. Only applies to phpBB forums that had been updated from versions prior to phpBB 3.3.8 and have not been updated ...

CVE-2026-48613

Affects phpBB forums that were upgraded from versions prior to 3.3.8 and have not been updated to 3.3.11 or newer. The issue lies in the profile field migration process where user-supplied profile field data is not properly sanitized, allowing an SQL injection. The vulnerability enables execution...

PT-2026-48828

Name of the Vulnerable Software and Affected Versions phpBB versions prior to 3.3.11 Description An issue exists in the profile field migration process where user-supplied profile field data is handled improperly. This allows for the execution of arbitrary SQL queries, a technique known as SQL...

GHSA-7GM6-W7MX-58CR phpBB has Password Reset Link Poisoning via Host Header injection

phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When forceservervars is disabled, the servers hostname may be extracted from the HTTP Host header which is used to generate the password reset link URL. An attacker who can manipulate the Hos...