2417 matches found
CVE-2026-48611-EXPLOIT
CVE-2026-48611 – phpBB OAuth Account Hijacking Exploit Unauthenticated Account Takeover | CVSS 9.4 Critical | Ready to use 🔥 What you get Fully working Python exploit for CVE-2026-48611 Mass scanner — checks thousands of targets automatically CSRF payload generator — creates HTML file for account...
phpBB < 3.3.17 - Authentication Bypass
phpBB before 3.3.17 contains an authentication bypass vulnerability in the login-link feature. By setting the authprovider query parameter to "apache", an unauthenticated attacker can bypass password verification and log in as any user, including administrators. The Apache auth provider trusts th...
CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure
CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - Advisory 06 - 25/02/05 Program: phpBB 2.0.12 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.12 & Lower versions Risk: Low Risk!! Impact: Full path disclosure -==phpBB 2.0.12 Full path disclosure==- Description phpB...
CVE-2026-48611-phpBB
CVE-2026-48611-phpBB Bypass Authentication simple poc bypass auth if you want to access via browser don't forget to change USERAGENT variable in script according to what is displayed in your browser so it can work. use cookie editor to replace value sid and u Affected: phpBB 3.3.16 and below +...
phpBB-CVE-2026-48611
USE AT YOUR OWN RISK. This tool is provided strictly for authorized security research, penetration testing, and educational purposes. Only run it against systems you own or have explicit, written permission to test. The author is not responsible or liable for any illegal or unethical use of this...
CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities
Neo Security Team NST® - Advisory 15 - 00/00/06 Program: phpBB 2.0.15 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.15 & Lower versions Risk: High Risk!! Impact: Multiple DoS Vulnerabilities. Description phpBB is a high powered, fully scalable, and highly customizable Open Source...
nns-ctf-php-is-my-passion
Competition Introduction NNS CTF is a jeopardy styled CTF comp...
Exploit for CVE-2026-48611
USE AT YOUR OWN RISK. This tool is provided strictly for...
FreeBSD : phpBB -- multiple vulnerabilities (4d06b948-a323-11f1-a655-3497f65b111b)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4d06b948-a323-11f1-a655-3497f65b111b advisory. The phpBB Team reports: Changes since 3.3.16: Improper state verification in OAuth implementation...
CVE-2026-78293
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
CVE-2026-78293 WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
EUVD-2026-66947
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
CVE-2026-78293 WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
CVE-2026-78293
CVE-2026-78293 affects the WordPress plugin WP w3all phpBB (versions ≤ 3.0.6 ), where an unauthenticated Cross Site Scripting (XSS) vulnerability was identified. The issue was discovered by lanlv – HPT Vietnam Corporation and reported via Patchstack. The CVSS 3.1 score is 7.1 (HIGH) with vector A...
CVE-2026-78293: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
PT-2026-82466
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by lanlv - HPT Vietnam Coporation in WordPress Plugin WP w3all phpBB versions = 3.0.6...
CVE-2026-73998
Subscriber SQL Injection in WP w3all phpBB = 3.0.5 versions...
CVE-2026-73998
The WordPress WP w3all phpBB plugin (≤ 3.0.5) has a SQL injection vulnerability exploitable by authenticated subscribers with network access; no patch version or in-the-wild exploitation details are provided in the documents.