Page 11 of 62 results (0.011 seconds)

CVSS: 5.0EPSS: 0%CPEs: 13EXPL: 1

CVE-2004-1950

https://notcve.org/view.php?id=CVE-2004-1950

phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses. • http://marc.info/?l=bugtraq&m=108239864203144&w=2 http://marc.info/?l=bugtraq&m=108241122908409&w=2 http://secunia.com/advisories/11434 http://www.securityfocus.com/bid/10170 https://exchange.xforce.ibmcloud.com/vulnerabilities/15909 •

CVSS: 7.5EPSS: 4%CPEs: 18EXPL: 1

CVE-2004-1943 – phpBB 2.0.x - 'album_portal.php' Remote File Inclusion

https://notcve.org/view.php?id=CVE-2004-1943

PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. • https://www.exploit-db.com/exploits/24026 http://marc.info/?l=bugtraq&m=108244738102532&w=2 http://www.securityfocus.com/bid/10177 https://exchange.xforce.ibmcloud.com/vulnerabilities/15916 •

CVSS: 6.8EPSS: 0%CPEs: 9EXPL: 0

CVE-2004-0339

https://notcve.org/view.php?id=CVE-2004-0339

Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter. • http://marc.info/?l=bugtraq&m=107799508130700&w=2 http://www.securityfocus.com/bid/9765 https://exchange.xforce.ibmcloud.com/vulnerabilities/15348 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2

CVE-2003-1530 – phpBB 2.0.3 - 'privmsg.php' SQL Injection

https://notcve.org/view.php?id=CVE-2003-1530

SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the mark[] parameter. • https://www.exploit-db.com/exploits/22182 http://archives.neohapsis.com/archives/bugtraq/2003-01/0125.html http://secunia.com/advisories/7887 http://www.osvdb.org/4277 http://www.securityfocus.com/archive/1/307212/30/26300/threaded http://www.securityfocus.com/bid/6634 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 4.6EPSS: 0%CPEs: 19EXPL: 0

CVE-2003-1215

https://notcve.org/view.php?id=CVE-2003-1215

SQL injection vulnerability in groupcp.php for phpBB 2.0.6 and earlier allows group moderators to perform unauthorized activities via the sql_in parameter. • http://marc.info/?l=bugtraq&m=107273069130885&w=2 http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943 http://www.securityfocus.com/bid/9314 https://exchange.xforce.ibmcloud.com/vulnerabilities/14096 •