CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-0438

Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.19, when Link to off-site Avatar or bbcode (IMG) are enabled, allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag in a user profile, as demonstrated using links to (1) admin/admin_users.php and (2) modcp.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 72.0%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2006-0438

Phpbb Group » Phpbb » Version: 2.0.0

cpe:2.3:a:phpbb_group:phpbb:2.0.0
Phpbb Group » Phpbb » Version: 2.0.1

cpe:2.3:a:phpbb_group:phpbb:2.0.1
Phpbb Group » Phpbb » Version: 2.0.10

cpe:2.3:a:phpbb_group:phpbb:2.0.10
Phpbb Group » Phpbb » Version: 2.0.11

cpe:2.3:a:phpbb_group:phpbb:2.0.11
Phpbb Group » Phpbb » Version: 2.0.12

cpe:2.3:a:phpbb_group:phpbb:2.0.12
Phpbb Group » Phpbb » Version: 2.0.13

cpe:2.3:a:phpbb_group:phpbb:2.0.13
Phpbb Group » Phpbb » Version: 2.0.14

cpe:2.3:a:phpbb_group:phpbb:2.0.14
Phpbb Group » Phpbb » Version: 2.0.15

cpe:2.3:a:phpbb_group:phpbb:2.0.15
Phpbb Group » Phpbb » Version: 2.0.16

cpe:2.3:a:phpbb_group:phpbb:2.0.16
Phpbb Group » Phpbb » Version: 2.0.17

cpe:2.3:a:phpbb_group:phpbb:2.0.17
Phpbb Group » Phpbb » Version: 2.0.18

cpe:2.3:a:phpbb_group:phpbb:2.0.18
Phpbb Group » Phpbb » Version: 2.0.19

cpe:2.3:a:phpbb_group:phpbb:2.0.19
Phpbb Group » Phpbb » Version: 2.0.2

cpe:2.3:a:phpbb_group:phpbb:2.0.2
Phpbb Group » Phpbb » Version: 2.0.3

cpe:2.3:a:phpbb_group:phpbb:2.0.3
Phpbb Group » Phpbb » Version: 2.0.4

cpe:2.3:a:phpbb_group:phpbb:2.0.4
Phpbb Group » Phpbb » Version: 2.0.5

cpe:2.3:a:phpbb_group:phpbb:2.0.5
Phpbb Group » Phpbb » Version: 2.0.6

cpe:2.3:a:phpbb_group:phpbb:2.0.6
Phpbb Group » Phpbb » Version: 2.0.6c

cpe:2.3:a:phpbb_group:phpbb:2.0.6c
Phpbb Group » Phpbb » Version: 2.0.6d

cpe:2.3:a:phpbb_group:phpbb:2.0.6d
Phpbb Group » Phpbb » Version: 2.0.7

cpe:2.3:a:phpbb_group:phpbb:2.0.7
Phpbb Group » Phpbb » Version: 2.0.7a

cpe:2.3:a:phpbb_group:phpbb:2.0.7a
Phpbb Group » Phpbb » Version: 2.0.8

cpe:2.3:a:phpbb_group:phpbb:2.0.8
Phpbb Group » Phpbb » Version: 2.0.8a

cpe:2.3:a:phpbb_group:phpbb:2.0.8a
Phpbb Group » Phpbb » Version: 2.0.9

cpe:2.3:a:phpbb_group:phpbb:2.0.9
Phpbb Group » Phpbb » Version: 2.0_beta1

cpe:2.3:a:phpbb_group:phpbb:2.0_beta1
Phpbb Group » Phpbb » Version: 2.0_rc1

cpe:2.3:a:phpbb_group:phpbb:2.0_rc1
Phpbb Group » Phpbb » Version: 2.0_rc2

cpe:2.3:a:phpbb_group:phpbb:2.0_rc2
Phpbb Group » Phpbb » Version: 2.0_rc3

cpe:2.3:a:phpbb_group:phpbb:2.0_rc3
Phpbb Group » Phpbb » Version: 2.0_rc4

cpe:2.3:a:phpbb_group:phpbb:2.0_rc4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-0438

Products

Pricing

Contact Us