CVSS: 7.5EPSS: 96%CPEs: 29EXPL: 4CVE-2004-1315 – PHP-Nuke 7.0/8.1/8.1.35 - Wormable Remote Code Execution
https://notcve.org/view.php?id=CVE-2004-1315
viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into the result, which is then processed by PHP exec, as exploited by the Santy.A worm. • https://www.exploit-db.com/exploits/12510 https://www.exploit-db.com/exploits/647 https://www.exploit-db.com/exploits/16890 https://www.exploit-db.com/exploits/24274 http://marc.info/?l=bugtraq&m=110029415208724&w=2 http://marc.info/?l=bugtraq&m=110365752909029&w=2 http://marc.info/?t=110079440800004&r=1&w=2 http://secunia.com/advisories/13239 http://www.kb.cert.org/vuls/id/497400 http://www.phpbb.com/phpBB/viewtopic.php?t=240513 http://www. •
CVSS: 4.3EPSS: 0%CPEs: 19EXPL: 1CVE-2004-2055
https://notcve.org/view.php?id=CVE-2004-2055
Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the search_author parameter. • http://marc.info/?l=bugtraq&m=109034476122723&w=2 http://secunia.com/advisories/12114 http://www.securityfocus.com/bid/10753 https://exchange.xforce.ibmcloud.com/vulnerabilities/16758 •
CVSS: 7.5EPSS: 4%CPEs: 18EXPL: 1CVE-2004-1943 – phpBB 2.0.x - 'album_portal.php' Remote File Inclusion
https://notcve.org/view.php?id=CVE-2004-1943
PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. • https://www.exploit-db.com/exploits/24026 http://marc.info/?l=bugtraq&m=108244738102532&w=2 http://www.securityfocus.com/bid/10177 https://exchange.xforce.ibmcloud.com/vulnerabilities/15916 •
CVSS: 4.6EPSS: 0%CPEs: 19EXPL: 0CVE-2003-1215
https://notcve.org/view.php?id=CVE-2003-1215
SQL injection vulnerability in groupcp.php for phpBB 2.0.6 and earlier allows group moderators to perform unauthorized activities via the sql_in parameter. • http://marc.info/?l=bugtraq&m=107273069130885&w=2 http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943 http://www.securityfocus.com/bid/9314 https://exchange.xforce.ibmcloud.com/vulnerabilities/14096 •
CVSS: 7.5EPSS: 1%CPEs: 19EXPL: 2CVE-2003-1216 – phpBB 2.0.6 - 'search_id' SQL Injection / MD5 Hash
https://notcve.org/view.php?id=CVE-2003-1216
SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the search_id parameter. • https://www.exploit-db.com/exploits/137 http://marc.info/?l=bugtraq&m=106997132425576&w=2 http://marc.info/?l=bugtraq&m=107005608726609&w=2 http://marc.info/?l=bugtraq&m=107196735102970&w=2 http://www.phpbb.com/phpBB/viewtopic.php?t=153818 http://www.securityfocus.com/bid/9122 https://exchange.xforce.ibmcloud.com/vulnerabilities/13867 •