CVSS: 5.1EPSS: 0%CPEs: 7EXPL: 0CVE-2002-0475
https://notcve.org/view.php?id=CVE-2002-0475
Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message. • http://www.iss.net/security_center/static/7459.php http://www.securiteam.com/unixfocus/6W00Q202UM.html http://www.securityfocus.com/bid/4379 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2001-1482
https://notcve.org/view.php?id=CVE-2001-1482
SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby variable. • http://www.securityfocus.com/archive/1/219178 http://www.securityfocus.com/bid/3411 https://exchange.xforce.ibmcloud.com/vulnerabilities/7253 •
CVSS: 4.6EPSS: 0%CPEs: 2EXPL: 3CVE-2001-1472 – phpBB 1.4 - SQL Query Manipulation
https://notcve.org/view.php?id=CVE-2001-1472
SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative access via the viewemail parameter. • https://www.exploit-db.com/exploits/21046 http://www.kb.cert.org/vuls/id/314347 http://www.securityfocus.com/archive/1/201715 http://www.securityfocus.com/bid/3142 https://exchange.xforce.ibmcloud.com/vulnerabilities/6944 •