Show filters
162 Total Results
Displaying 141-150 of 162
Sort by:
Attacker Value
Unknown
CVE-2004-1950
Disclosure Date: April 19, 2004 (last updated February 22, 2025)
phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses.
0
Attacker Value
Unknown
CVE-2003-1373
Disclosure Date: December 31, 2003 (last updated February 22, 2025)
Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. (dot dot) sequences followed by NULL (%00) characters in CGI parameters, as demonstrated using the lang parameter in prefs.php.
0
Attacker Value
Unknown
CVE-2003-1530
Disclosure Date: December 31, 2003 (last updated February 22, 2025)
SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the mark[] parameter.
0
Attacker Value
Unknown
CVE-2003-1244
Disclosure Date: December 31, 2003 (last updated February 22, 2025)
SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force user passwords and possibly gain unauthorized access to forums via the forum_id parameter to index.php.
0
Attacker Value
Unknown
CVE-2003-1215
Disclosure Date: December 29, 2003 (last updated February 22, 2025)
SQL injection vulnerability in groupcp.php for phpBB 2.0.6 and earlier allows group moderators to perform unauthorized activities via the sql_in parameter.
0
Attacker Value
Unknown
CVE-2003-1216
Disclosure Date: November 27, 2003 (last updated February 22, 2025)
SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the search_id parameter.
0
Attacker Value
Unknown
CVE-2003-0484
Disclosure Date: August 07, 2003 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topic_id parameter.
0
Attacker Value
Unknown
CVE-2003-0486
Disclosure Date: August 07, 2003 (last updated February 22, 2025)
SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter.
0
Attacker Value
Unknown
CVE-2002-1537
Disclosure Date: March 31, 2003 (last updated February 22, 2025)
admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".
0
Attacker Value
Unknown
CVE-2002-2255
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the search_username parameter in searchuser mode.
0
