Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Phpbb Group Subscribe
Filtered by product Phpbb
Total 83 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-1537 1 Phpbb Group 1 Phpbb 2008-09-05 10.0 HIGH N/A
admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".
CVE-2002-0902 1 Phpbb Group 1 Phpbb 2008-09-05 7.5 HIGH N/A
Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script.
CVE-2002-0475 1 Phpbb Group 1 Phpbb 2008-09-05 5.1 MEDIUM N/A
Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message.