Page 17 of 104 results (0.003 seconds)

CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0

CVE-2004-0729

https://notcve.org/view.php?id=CVE-2004-0729

PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid (1) category_rows parameter to index.php, (2) faq parameter to faq.php, or (3) ranksrow parameter to profile.php, which reveal the full path in an error message. phpBB 2.0.8 permiteaatacantes remotos obtener información sensible mediante parámetros inválidos: (1) category_rows a index.php, (2) faq a faq.php, o (3) ranksrow a profile.php, lo que revela la ruta completa en el mensaje de error. • http://marc.info/?l=bugtraq&m=108999024506020&w=2 http://www.waraxe.us/index.php?modname=sa&id=34 https://exchange.xforce.ibmcloud.com/vulnerabilities/16716 https://exchange.xforce.ibmcloud.com/vulnerabilities/16720 https://exchange.xforce.ibmcloud.com/vulnerabilities/16723 •

CVSS: 4.3EPSS: 0%CPEs: 19EXPL: 1

CVE-2004-2055

https://notcve.org/view.php?id=CVE-2004-2055

Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the search_author parameter. • http://marc.info/?l=bugtraq&m=109034476122723&w=2 http://secunia.com/advisories/12114 http://www.securityfocus.com/bid/10753 https://exchange.xforce.ibmcloud.com/vulnerabilities/16758 •

CVSS: 5.0EPSS: 0%CPEs: 13EXPL: 1

CVE-2004-1950

https://notcve.org/view.php?id=CVE-2004-1950

phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses. • http://marc.info/?l=bugtraq&m=108239864203144&w=2 http://marc.info/?l=bugtraq&m=108241122908409&w=2 http://secunia.com/advisories/11434 http://www.securityfocus.com/bid/10170 https://exchange.xforce.ibmcloud.com/vulnerabilities/15909 •

CVSS: 7.5EPSS: 4%CPEs: 18EXPL: 1

CVE-2004-1943 – phpBB 2.0.x - 'album_portal.php' Remote File Inclusion

https://notcve.org/view.php?id=CVE-2004-1943

PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. • https://www.exploit-db.com/exploits/24026 http://marc.info/?l=bugtraq&m=108244738102532&w=2 http://www.securityfocus.com/bid/10177 https://exchange.xforce.ibmcloud.com/vulnerabilities/15916 •

CVSS: 6.8EPSS: 0%CPEs: 9EXPL: 0

CVE-2004-0339

https://notcve.org/view.php?id=CVE-2004-0339

Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter. • http://marc.info/?l=bugtraq&m=107799508130700&w=2 http://www.securityfocus.com/bid/9765 https://exchange.xforce.ibmcloud.com/vulnerabilities/15348 •