Show filters
176 Total Results
Displaying 51-60 of 176
Sort by:
Attacker Value
Unknown
CVE-2006-7090
Disclosure Date: March 02, 2007 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in phpbb_security.php in phpBB Security 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the php_root_path parameter.
0
Attacker Value
Unknown
CVE-2006-7076
Disclosure Date: March 02, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to inject arbitrary web script or HTML via the entry parameter. NOTE: this issue might be resultant from SQL injection.
0
Attacker Value
Unknown
CVE-2006-7077
Disclosure Date: March 02, 2007 (last updated October 04, 2023)
SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to execute arbitrary SQl commands via the entry parameter.
0
Attacker Value
Unknown
CVE-2007-1105
Disclosure Date: February 26, 2007 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
0
Attacker Value
Unknown
CVE-2007-1048
Disclosure Date: February 21, 2007 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in admin_rebuild_search.php in phpbb_wordsearch allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
0
Attacker Value
Unknown
CVE-2006-2219
Disclosure Date: February 08, 2007 (last updated October 04, 2023)
phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the (1) mode parameter to memberlist.php and the (2) highlight parameter to viewtopic.php that are used as an argument to the htmlspecialchars or urlencode functions, which displays the installation path in the resulting error message.
0
Attacker Value
Unknown
CVE-2006-2220
Disclosure Date: February 08, 2007 (last updated October 04, 2023)
phpBB 2.0.20 does not properly verify user-specified input variables used as limits to SQL queries, which allows remote attackers to obtain sensitive information via a negative LIMIT specification, as demonstrated by the start parameter to memberlist.php, which reveals the SQL query in the resulting error message.
0
Attacker Value
Unknown
CVE-2007-0761
Disclosure Date: February 06, 2007 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in config.php in phpBB ezBoard converter (ezconvert) 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the ezconvert_dir parameter.
0
Attacker Value
Unknown
CVE-2007-0762
Disclosure Date: February 06, 2007 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in includes/functions.php in phpBB++ Build 100 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
0
Attacker Value
Unknown
CVE-2007-0680
Disclosure Date: February 03, 2007 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in includes/functions.php in Phpbb Tweaked 3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
0
