phpBB < 3.3.17 - Authentication Bypass

phpBB before 3.3.17 contains an authentication bypass vulnerability in the login-link feature. By setting the authprovider query parameter to "apache", an unauthenticated attacker can bypass password verification and log in as any user, including administrators. The Apache auth provider trusts th...

CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities

Neo Security Team NST® - 公告 15 - 00/00/06 程序: phpBB 2.0.15 主页: http://www.phpbb.com 受影响版本: phpBB 2.0.15 及更低版本 风险: 高风险!! 影响: 多个拒绝服务漏洞。 描述 phpBB 是一个功能强大、完全可扩展且高度可定制的 开源论坛软件包。phpBB 拥有用户友好的 界面、简单直观的管理面板以及 实用的 FAQ。基于强大的 PHP 服务器语言以及您 选择的 MySQL、MS-SQL、PostgreSQL 或 Access/ODBC 数据库服务器， phpBB...

CVE-2026-48611-EXPLOIT

CVE-2026-48611 – Exploit de Secuestro de Cuenta OAuth de phpBB Toma de control de cuenta no autenticada | CVSS 9.4 Crítico | Listo para usar 🔥 Lo que obtienes Exploit de Python totalmente funcional para CVE-2026-48611 Escáner masivo — comprueba miles de objetivos automáticamente Generador de...

CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure

CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - 安全公告 06 - 25/02/05 程序：phpBB 2.0.12 主页：http://www.phpbb.com 受影响版本：phpBB 2.0.12 及更低版本 风险：低风险!! 影响：完整路径泄露 root@kitploit: -==phpBB 2.0.12 完整路径泄露==- 描述 phpBB 是一个高性能、完全可扩展且高度可定制的开源论坛软件包。phpBB...

CVE-2026-48611-phpBB

CVE-2026-48611-phpBB 绕过身份验证 简单的绕过身份验证PoC，如果想通过浏览器访问，别忘了根据浏览器显示的User-Agent更改脚本中的 USERAGENT 变量，否则无法正常工作。使用Cookie编辑器替换 sid和 u的值。 影响版本：phpBB 3.3.16及以下 + 4.0.0-a2 root@kitploit: phpbb python3 exploit.py https://localhost:8000 joushk + Target: https://localhost:8000 + Target username: joushk +...

phpBB-CVE-2026-48611

ÚSALO BAJO TU PROPIO RIESGO. Esta herramienta se proporciona estrictamente para investigación de seguridad autorizada, pruebas de penetración y fines educativos. Solo ejecútala contra sistemas que poseas o para los que tengas permiso explícito y por escrito. El autor no es responsable ni se hace...

CVE-2026-78293

Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...

CVE-2026-78293 WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...

EUVD-2026-66947

Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...

CVE-2026-78293

CVE-2026-78293 affects the WordPress plugin WP w3all phpBB (versions ≤ 3.0.6 ), where an unauthenticated Cross Site Scripting (XSS) vulnerability was identified. The issue was discovered by lanlv – HPT Vietnam Corporation and reported via Patchstack. The CVSS 3.1 score is 7.1 (HIGH) with vector A...

WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by lanlv - HPT Vietnam Coporation in WordPress Plugin WP w3all phpBB versions = 3.0.6...

CVE-2026-73998

Subscriber SQL Injection in WP w3all phpBB = 3.0.5 versions...

CVE-2026-73998

The WordPress WP w3all phpBB plugin (≤ 3.0.5) has a SQL injection vulnerability exploitable by authenticated subscribers with network access; no patch version or in-the-wild exploitation details are provided in the documents.

EUVD-2026-63313

Subscriber SQL Injection in WP w3all phpBB = 3.0.5 versions...

CVE-2026-73998 WordPress WP w3all phpBB plugin <= 3.0.5 - SQL Injection vulnerability

Subscriber SQL Injection in WP w3all phpBB = 3.0.5 versions...

Insufficient Granularity of Access Control

Overview phpbb/phpbb is a Forum Software application. Affected versions of this package are vulnerable to Insufficient Granularity of Access Control due to improper verification of access permissions in the Administration Control Panel ACP. An attacker can obtain elevated privileges by modifying...

CVE-2026-48613

SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL queries. Only applies to phpBB forums that had been updated from versions prior to phpBB 3.3.8 and have not been updated ...

CVE-2026-48613

SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL queries. Only applies to phpBB forums that had been updated from versions prior to phpBB 3.3.8 and have not been updated ...

CVE-2026-48613

Affects phpBB forums that were upgraded from versions prior to 3.3.8 and have not been updated to 3.3.11 or newer. The issue lies in the profile field migration process where user-supplied profile field data is not properly sanitized, allowing an SQL injection. The vulnerability enables execution...

PT-2026-48828

Name of the Vulnerable Software and Affected Versions phpBB versions prior to 3.3.11 Description An issue exists in the profile field migration process where user-supplied profile field data is handled improperly. This allows for the execution of arbitrary SQL queries, a technique known as SQL...