Page 17 of 104 results (0.004 seconds)

CVSS: 6.8EPSS: 1%CPEs: 2EXPL: 0

CVE-2004-0730

https://notcve.org/view.php?id=CVE-2004-0730

Multiple cross-site scripting (XSS) vulnerabilities in PhpBB 2.0.8 allow remote attackers to inject arbitrary web script or HTML via (1) the cat_title parameter in index.php, (2) the faq[0][0] parameter in lang_faq.php as accessible from faq.php, or (3) the faq[0][0] parameter in lang_bbcode.php as accessible from faq.php. Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en phpBB 2.0.8 permite a atacantes remotos inyectar scritp web o HTML de su elección mediante (1) el parámetro cat_title en index.php (2) el parámetro faq[0][0] en lang_faq.php, cuando se accede desde faq.php, o (3) el parámetro faq[0][0] en lang_bbcode cuando se accede desde faq.php. • http://marc.info/?l=bugtraq&m=108999024506020&w=2 http://www.securityfocus.com/bid/10738 http://www.waraxe.us/index.php?modname=sa&id=34 https://exchange.xforce.ibmcloud.com/vulnerabilities/16724 https://exchange.xforce.ibmcloud.com/vulnerabilities/16725 https://exchange.xforce.ibmcloud.com/vulnerabilities/16726 •

CVSS: 4.3EPSS: 0%CPEs: 19EXPL: 1

CVE-2004-2055

https://notcve.org/view.php?id=CVE-2004-2055

Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the search_author parameter. • http://marc.info/?l=bugtraq&m=109034476122723&w=2 http://secunia.com/advisories/12114 http://www.securityfocus.com/bid/10753 https://exchange.xforce.ibmcloud.com/vulnerabilities/16758 •

CVSS: 5.0EPSS: 0%CPEs: 13EXPL: 1

CVE-2004-1950

https://notcve.org/view.php?id=CVE-2004-1950

phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses. • http://marc.info/?l=bugtraq&m=108239864203144&w=2 http://marc.info/?l=bugtraq&m=108241122908409&w=2 http://secunia.com/advisories/11434 http://www.securityfocus.com/bid/10170 https://exchange.xforce.ibmcloud.com/vulnerabilities/15909 •

CVSS: 7.5EPSS: 4%CPEs: 18EXPL: 1

CVE-2004-1943 – phpBB 2.0.x - 'album_portal.php' Remote File Inclusion

https://notcve.org/view.php?id=CVE-2004-1943

PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. • https://www.exploit-db.com/exploits/24026 http://marc.info/?l=bugtraq&m=108244738102532&w=2 http://www.securityfocus.com/bid/10177 https://exchange.xforce.ibmcloud.com/vulnerabilities/15916 •

CVSS: 6.8EPSS: 0%CPEs: 9EXPL: 0

CVE-2004-0339

https://notcve.org/view.php?id=CVE-2004-0339

Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter. • http://marc.info/?l=bugtraq&m=107799508130700&w=2 http://www.securityfocus.com/bid/9765 https://exchange.xforce.ibmcloud.com/vulnerabilities/15348 •