Phpbb Group

Phpbb

81 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.4

CVE-2005-0259

  • EPSS 0.54%
  • Published 14.03.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field ...

5

CVE-2005-0258

  • EPSS 0.47%
  • Published 14.03.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote attackers to delete (unlink) arbitrary files via "/../" sequences in the...

5

CVE-2005-0603

  • EPSS 4.12%
  • Published 28.02.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regular expression syntax, which reveals the path in a PHP error message.

7.5

CVE-2004-2350

Exploit
  • EPSS 0.54%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the search_results parameter.

5

CVE-2004-2054

Exploit
  • EPSS 0.56%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via (1) the mode parameter to privmsg.php or (2) the redirect parameter to login....

4.3

CVE-2004-1809

  • EPSS 0.56%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in phpBB 2.0.6d and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) postdays parameter to viewtopic.php or (2) topicdays parameter to viewforum.php.

7.5

CVE-2004-1535

  • EPSS 2.24%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_path parameter to reference a URL on a remote web server that contains the c...

4.3

CVE-2004-2130

Exploit
  • EPSS 6.37%
  • Published 23.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the (1) folder or (2) mode variables.

6.8

CVE-2004-0339

  • EPSS 0.83%
  • Published 23.11.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter.

7.5

CVE-2004-1315

  • EPSS 85.91%
  • Published 12.11.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special...