Page 14 of 81 results (0.010 seconds)

CVSS: 6.8EPSS: 0%CPEs: 4EXPL: 0

CVE-2003-1373

https://notcve.org/view.php?id=CVE-2003-1373

Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. (dot dot) sequences followed by NULL (%00) characters in CGI parameters, as demonstrated using the lang parameter in prefs.php. • http://archives.neohapsis.com/archives/bugtraq/2003-02/0245.html http://www.securityfocus.com/bid/6889 https://exchange.xforce.ibmcloud.com/vulnerabilities/11407 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 4.6EPSS: 0%CPEs: 19EXPL: 0

CVE-2003-1215

https://notcve.org/view.php?id=CVE-2003-1215

SQL injection vulnerability in groupcp.php for phpBB 2.0.6 and earlier allows group moderators to perform unauthorized activities via the sql_in parameter. • http://marc.info/?l=bugtraq&m=107273069130885&w=2 http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943 http://www.securityfocus.com/bid/9314 https://exchange.xforce.ibmcloud.com/vulnerabilities/14096 •

CVSS: 7.5EPSS: 1%CPEs: 19EXPL: 2

CVE-2003-1216 – phpBB 2.0.6 - 'search_id' SQL Injection / MD5 Hash

https://notcve.org/view.php?id=CVE-2003-1216

SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the search_id parameter. • https://www.exploit-db.com/exploits/137 http://marc.info/?l=bugtraq&m=106997132425576&w=2 http://marc.info/?l=bugtraq&m=107005608726609&w=2 http://marc.info/?l=bugtraq&m=107196735102970&w=2 http://www.phpbb.com/phpBB/viewtopic.php?t=153818 http://www.securityfocus.com/bid/9122 https://exchange.xforce.ibmcloud.com/vulnerabilities/13867 •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 2

CVE-2003-0486 – phpBB 2.0.5 - SQL Injection Password Disclosure

https://notcve.org/view.php?id=CVE-2003-0486

SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter. Vulnerabilidad de inyección de SQL en viewtopic.php de phpBB 2.0.5 y anteriores permite a atacantes remotos robar picadillos (hashes) de contraseñas mediante el parámetro topic_id. • https://www.exploit-db.com/exploits/44 http://marc.info/?l=bugtraq&m=105607263130644&w=2 http://www.phpbb.com/phpBB/viewtopic.php?t=112052 http://www.securityfocus.com/bid/7979 https://exchange.xforce.ibmcloud.com/vulnerabilities/12366 •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2002-1537

https://notcve.org/view.php?id=CVE-2002-1537

admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u". admin_ug_auth.php en phpBB 2.0.0 permite a usuarios locales obtener privilegios de administración llamando directamente a admin_ug_auth.php con campos del formulario modificados tales como el ""u"". • http://archives.neohapsis.com/archives/bugtraq/2002-10/0385.html http://www.iss.net/security_center/static/10489.php http://www.osvdb.org/4284 http://www.securityfocus.com/bid/6056 •