Phpbb_group Phpbb
82 CVEs affecting Phpbb_group Phpbb. Latest disclosed: 2007-03-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2007-1695 | | 2007-03-27 | PHP remote file inclusion vulnerability in includes/usercp_register.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP code via a URL in the… | |
CVE-2006-2219 | | 2007-02-08 | phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensi… | |
CVE-2006-6841 | | 2006-12-31 | Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors. | |
CVE-2006-6840 | | 2006-12-31 | Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter." | |
CVE-2006-6839 | | 2006-12-31 | Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redirection targets." | |
CVE-2006-6508 | | 2006-12-14 | Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.21 allows remote authenticated users to send unauthorized messages as an arbitrary user via unspec… | |
CVE-2006-6421 | | 2006-12-10 | Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arb… | |
CVE-2006-5435 | | 2006-10-20 | PHP remote file inclusion vulnerability in groupcp.php in phpBB 2.0.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb… | |
CVE-2006-5209 | | 2006-10-10 | PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to… | |
CVE-2006-4758 | | 2006-09-13 | phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrate… | |
CVE-2006-4450 | | 2006-08-30 | usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatar… | |
CVE-2006-2865 | | 2006-06-06 | PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE… | |
CVE-2006-2360 | | 2006-05-15 | SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter. | |
CVE-2006-2359 | | 2006-05-15 | Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id par… | |
CVE-2006-2134 | | 2006-05-02 | PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbi… | |
CVE-2006-1896 | | 2006-04-20 | Unspecified vulnerability in phpBB allows remote authenticated users with Administration Panel access to execute arbitrary PHP code via crafted Font Colour 3 (… | |
CVE-2006-1895 | | 2006-04-20 | Direct static code injection vulnerability in includes/template.php in phpBB allows remote authenticated users with write access to execute arbitrary PHP code… | |
CVE-2006-1775 | | 2006-04-13 | Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.19 allow remote attackers to inject arbitrary web script or HTML via the (1) Site Description… | |
CVE-2006-1603 | | 2006-04-04 | Cross-site scripting (XSS) vulnerability in profile.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML via the cur_password par… | |
CVE-2006-0632 | | 2006-02-10 | The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activation key ("validation ID") that is sent by… |