Vulnerabilities
Vulnerable Software
Phpbb Group:  >> Phpbb  >> 2.0.21  Security Vulnerabilities
Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redirection targets."
CVSS Score
10.0
EPSS Score
0.004
Published
2006-12-31
Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."
CVSS Score
10.0
EPSS Score
0.004
Published
2006-12-31
Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors.
CVSS Score
10.0
EPSS Score
0.004
Published
2006-12-31
Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.21 allows remote authenticated users to send unauthorized messages as an arbitrary user via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score
6.0
EPSS Score
0.006
Published
2006-12-14
Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user.
CVSS Score
6.0
EPSS Score
0.019
Published
2006-12-10
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score
7.5
EPSS Score
0.018
Published
2006-10-10
phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrated by a query to admin/admin_board.php with an avatar_path parameter ending in .php%00.
CVSS Score
4.6
EPSS Score
0.019
Published
2006-09-13


Contact Us

Shodan ® - All rights reserved