phpBB < 3.3.17 - Authentication Bypass

phpBB before 3.3.17 contains an authentication bypass vulnerability in the login-link feature. By setting the authprovider query parameter to "apache", an unauthenticated attacker can bypass password verification and log in as any user, including administrators. The Apache auth provider trusts th...

CVE-2026-48611-phpBB

CVE-2026-48611-phpBB Bypass Authentication simple poc bypass auth if you want to access via browser don't forget to change USERAGENT variable in script according to what is displayed in your browser so it can work. use cookie editor to replace value sid and u Affected: phpBB 3.3.16 and below +...

phpBB-CVE-2026-48611

USE AT YOUR OWN RISK. This tool is provided strictly for authorized security research, penetration testing, and educational purposes. Only run it against systems you own or have explicit, written permission to test. The author is not responsible or liable for any illegal or unethical use of this...

CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities

Neo Security Team NST® - Advisory 15 - 00/00/06 Program: phpBB 2.0.15 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.15 & Lower versions Risk: High Risk!! Impact: Multiple DoS Vulnerabilities. Description phpBB is a high powered, fully scalable, and highly customizable Open Source...

CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure

CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - Advisory 06 - 25/02/05 Program: phpBB 2.0.12 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.12 & Lower versions Risk: Low Risk!! Impact: Full path disclosure -==phpBB 2.0.12 Full path disclosure==- Description phpB...

CVE-2026-121769

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows SQL Injection.This issue affects WP w3all phpBB: from n/a through 3.1.9...

CVE-2026-121769

The WP w3all phpBB WordPress plugin (versions 3.1.9 and below ) is vulnerable to an SQL Injection vulnerability (CWE-89). The issue stems from the improper neutralization of special elements used in SQL commands. This vulnerability could allow an attacker to interact with the underlying database....

CVE-2026-121769 WordPress WP w3all phpBB plugin <= 3.1.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows SQL Injection.This issue affects WP w3all phpBB: from n/a through 3.1.9...

EUVD-2026-120147

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows SQL Injection.This issue affects WP w3all phpBB: from n/a through 3.1.9...

CVE-2026-121769 WordPress WP w3all phpBB plugin <= 3.1.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows SQL Injection.This issue affects WP w3all phpBB: from n/a through 3.1.9...

PT-2026-140952

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows SQL Injection.This issue affects WP w3all phpBB: from n/a through 3.1.9...

CVE-2026-121769: axew3.com WP w3all phpBB: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axew3.com WP…

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows SQL Injection.This issue affects WP w3all phpBB: from n/a through 3.1.9...

WordPress WP w3all phpBB plugin <= 3.1.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nikita Mateo Volovik in WordPress Plugin WP w3all phpBB versions = 3.1.9...

phpBB -- multiple vulnerabilities

The phpBB Team reports: Resend rate limiting incorrectly updating expiration time SECURITY-298 Attachment comment hijacking by other users SECURITY-300 Reflected XSS via data passed to registration page SECURITY-301, CVE-2026-87901 Hide oauth provider secrets in ACP SECURITY-302 Potential stored...

phpBB cross-site scripting vulnerability

Versions 3.3.0 through 3.3.18 of phpBB contain a cross-site scripting vulnerability. This vulnerability stems from improper sanitization in the registration module and may lead to reflected XSS attacks...

CVE-2026-107422

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows Stored XSS.This issue affects WP w3all phpBB: from n/a through 3.1.0...

CVE-2026-107422 WordPress WP w3all phpBB plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows Stored XSS.This issue affects WP w3all phpBB: from n/a through 3.1.0...

CVE-2026-107422

The WP w3all phpBB plugin (specifically the wp-w3all-phpbb-integration component) is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 3.1.0 . This issue stems from the improper neutralization of input during web page generation . An attacker could potentially execut...

EUVD-2026-101012

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows Stored XSS.This issue affects WP w3all phpBB: from n/a through 3.1.0...

CVE-2026-107422 WordPress WP w3all phpBB plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows Stored XSS.This issue affects WP w3all phpBB: from n/a through 3.1.0...