3 matches found
CVE-2006-2152
CVE-2006-2152 affects phpBB Advanced Guestbook 2.4.0 and earlier, where admin/addentry.php fails to sanitize input to the phpbb_root_path parameter before using it in PHP include(). This PHP remote file inclusion vulnerability arises when register_globals is enabled, allowing an unauthenticated a...
CVE-2006-7076
CVE-2006-7076 affects Advanced Guestbook 2.4 for phpBB, with a cross-site scripting flaw in guestbook.php that lets remote attackers inject arbitrary script or HTML via the entry parameter. The issue is identified as XSS and notes indicate it might originate from SQL injection. Documented impact ...
CVE-2006-7077
Technical details about CVE-2006-7077 are not provided in the connected documents. Available sources list a SQL injection in Advanced Guestbook 2.4 for phpBB, but do not include explicit product/version specifics or fixes.