Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Phpbb GroupPhpbb2.0.20

8 matches found

CVE
CVE•added 2007/01/03 2:0 a.m.•45 views

CVE-2006-6841

Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors.

10CVSS6.5AI score0.00378EPSS
CVE
CVE•added 2007/01/03 2:0 a.m.•44 views

CVE-2006-6840

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."

10CVSS6.3AI score0.00378EPSS
CVE
CVE•added 2007/01/03 2:0 a.m.•41 views

CVE-2006-6839

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redirection targets."

10CVSS6.4AI score0.00378EPSS
CVE
CVE•added 2006/06/06 8:6 p.m.•39 views

CVE-2006-2865

PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possib...

7.5CVSS7.6AI score0.04011EPSS
CVE
CVE•added 2006/12/10 11:28 a.m.•39 views

CVE-2006-6421

Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user.

6CVSS5.3AI score0.015EPSS
CVE
CVE•added 2007/02/08 5:28 p.m.•38 views

CVE-2006-2219

phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the (1) mode parameter to memberlist.php and the (2) highlight parameter to viewtopic.php that are used...

5CVSS6.5AI score0.00721EPSS
CVE
CVE•added 2006/08/30 1:4 a.m.•32 views

CVE-2006-4450

usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request.

5.1CVSS6.7AI score0.04788EPSS
CVE
CVE•added 2006/10/10 4:6 a.m.•32 views

CVE-2006-5209

PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

7.5CVSS7.9AI score0.01778EPSS