Lucene search
K

57 matches found

OSV
OSV
added 2018/11/24 12:0 a.m.24 views

DLA-1593-1 phpbb3 - security update

Bulletin has no description...

7.2CVSS6.8AI score0.13851EPSS
Exploits1
Openbugbounty
Openbugbounty
added 2018/07/27 4:49 p.m.8 views

turbomed-center.de Improper Access Control vulnerability

Open Bug Bounty ID: OBB-654657 Description| Value ---|--- Affected Website:| turbomed-center.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

0.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2018/01/22 12:0 a.m.25 views

FreeBSD : phpbb3 -- multiple issues (8e89a89a-fd15-11e7-bdf6-00e04c1ea73d)

phpbb developers reports : Password updater working with PostgreSQL - The cron for updating legacy password hashes was running invalid queries on PostgreSQL. Deleting orphaned attachments w/ large number of orphaned attachments - Orphaned attachment deletion was improved to be able to delete them...

5.5AI score
Exploits0References2
FreeBSD
FreeBSD
added 2018/01/07 12:0 a.m.16 views

phpbb3 -- multiple issues

phpbb developers reports: Password updater working with PostgreSQL - The cron for updating legacy password hashes was running invalid queries on PostgreSQL. Deleting orphaned attachments w/ large number of orphaned attachments - Orphaned attachment deletion was improved to be able to delete them...

7AI score
Exploits0References1
Kitploit
Kitploit
added 2017/10/31 1:12 p.m.396 views

Hashcat v4.0 - World's Fastest and Most Advanced Password Recovery Utility

hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 200 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and OSX, and has facilities to help enable...

9.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/06/05 7:8 p.m.11 views

phpbb3.ru Open Redirect vulnerability

Vulnerable URL: http://phpbb3.ru/?goto=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.08.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 4962167 VIP website status:| No Check phpbb3.ru SSL...

6.9AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.15 views

Lotus Core CMS 1.0.1 - Remote File Inclusion Vulnerabilities

No description provided by source. phpbb3 Lotus Core CMS v1.0.1 Remote File Include Vulnerabilities Discovered by : Ciph3r MAIL : [email protected] SP TANX4 : Iranian hacker & Kurdish Security TEAM CLASS : remote download cms: http://sourceforge.net/project/showfiles.php?groupid=215112 C0d...

7.1AI score
Exploits0
Hacker One
Hacker One
added 2014/06/25 9:14 a.m.20 views

Yahoo!: Default /docs folder of PHPBB3 installation on gamesnet.yahoo.com

Thank you for your submission to the Yahoo Bug Bounty program. We were able to reproduce the issue you reported and have implemented appropriate fixes. We appreciate your adherence to responsible disclosure guidelines and look forward to your future participation in the program...

6.7AI score
Exploits0
0day.today
0day.today
added 2013/12/12 12:0 a.m.29 views

phpBB3 Unified Convertor Framework PHP Code Injection

PhpBB3 Unified Convertor Framework suffers from a PHP Code Injection in installation path. By default it should be disabled but you can find open installation path's by dorking it or seeking for dir's. Title: phpBB3 Unified Convertor Framework PHP Code Injection Date: 12.12.13 Contact:...

7.6AI score
Exploits0
NVD
NVD
added 2013/09/12 1:31 p.m.10 views

CVE-2013-5724

Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations...

2.1CVSS6.2AI score0.0004EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2013/09/12 1:31 p.m.18 views

CVE-2013-5724

Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations...

2.1CVSS5.8AI score0.0004EPSS
Exploits0References4
Prion
Prion
added 2013/09/12 1:31 p.m.12 views

Code injection

Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations...

2.1CVSS6.8AI score0.0004EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2013/09/11 2:0 p.m.17 views

CVE-2013-5724

Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations...

6.2AI score0.0004EPSS
Exploits0References3
CVE
CVE
added 2013/09/11 2:0 p.m.51 views

CVE-2013-5724

CVE-2013-5724 affects phpBB3 up to version 3.0.11-4 used in Debian GNU/Linux. The issue arises from world-writable permissions on cache files, enabling local users to modify file contents through standard filesystem writes. The vulnerability is localized to systems running the affected phpBB3 pac...

2.1CVSS6.4AI score0.0004EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2013/09/08 12:0 a.m.31 views

Debian DSA-2752-1 : phpbb3 - permissions too wide

Andreas Beckmann discovered that phpBB, a web forum, as installed in Debian, sets incorrect permissions for cached files, allowing a malicious local user to overwrite them. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

2.1CVSS5.3AI score0.0004EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2013/09/07 12:0 a.m.18 views

Debian Security Advisory DSA 2752-1 (phpbb3 - permissions too wide)

Andreas Beckmann discovered that phpBB, a web forum, as installed in Debian, sets incorrect permissions for cached files, allowing a malicious local user to overwrite them. OpenVAS Vulnerability Test $Id: deb2752.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2752-1...

2.1CVSS6.5AI score0.0004EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2013/09/06 12:0 a.m.13 views

Debian: Security Advisory (DSA-2752-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.1CVSS7.2AI score0.0004EPSS
Exploits0References3
0day.today
0day.today
added 2012/07/30 12:0 a.m.125 views

phpBB v3.0.10 SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------ Name : phpBB3 SQL Injection ------------------------------------------------------------------ Date : 27.07.2012...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2012/07/28 12:0 a.m.68 views

phpBB3 SQL Injection

------------------------------------------------------------------ Name : phpBB3 SQL Injection ------------------------------------------------------------------ Date : 27.07.2012 ------------------------------------------------------------------ Site : www.phpbb.com...

0.2AI score
Exploits0
Packet Storm
Packet Storm
added 2009/09/02 12:0 a.m.22 views

phpBB3 prime_quick_style SQL Injection

phpBB3 addon primequickstyle GetAdmin Exploit Vulnerability found and exploited by -SmoG- target file: primequickstyle.php vuln: POST parameter "primequickstyle" is injectable. source: http://www.phpbb.com/community/viewtopic.php?f=70&t=692625 HowTo: after login, go to "./ucp.php" and manipulate...

0.1AI score
Exploits0
Rows per page
Query Builder