Page 28 of 151 results (0.005 seconds)

CVSS: 7.5EPSS: 1%CPEs: 19EXPL: 2

CVE-2003-1216 – phpBB 2.0.6 - 'search_id' SQL Injection / MD5 Hash

https://notcve.org/view.php?id=CVE-2003-1216

SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the search_id parameter. • https://www.exploit-db.com/exploits/137 http://marc.info/?l=bugtraq&m=106997132425576&w=2 http://marc.info/?l=bugtraq&m=107005608726609&w=2 http://marc.info/?l=bugtraq&m=107196735102970&w=2 http://www.phpbb.com/phpBB/viewtopic.php?t=153818 http://www.securityfocus.com/bid/9122 https://exchange.xforce.ibmcloud.com/vulnerabilities/13867 •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 2

CVE-2003-0486 – phpBB 2.0.5 - SQL Injection Password Disclosure

https://notcve.org/view.php?id=CVE-2003-0486

SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter. Vulnerabilidad de inyección de SQL en viewtopic.php de phpBB 2.0.5 y anteriores permite a atacantes remotos robar picadillos (hashes) de contraseñas mediante el parámetro topic_id. • https://www.exploit-db.com/exploits/44 http://marc.info/?l=bugtraq&m=105607263130644&w=2 http://www.phpbb.com/phpBB/viewtopic.php?t=112052 http://www.securityfocus.com/bid/7979 https://exchange.xforce.ibmcloud.com/vulnerabilities/12366 •

CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2003-0484

https://notcve.org/view.php?id=CVE-2003-0484

Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topic_id parameter. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en viewtopic.php de phpBB permite a atacantes remotos insertar scritp web arbitrario mediante el parámetro topic_id • http://marc.info/?l=bugtraq&m=105639883722514&w=2 •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2002-1537

https://notcve.org/view.php?id=CVE-2002-1537

admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u". admin_ug_auth.php en phpBB 2.0.0 permite a usuarios locales obtener privilegios de administración llamando directamente a admin_ug_auth.php con campos del formulario modificados tales como el ""u"". • http://archives.neohapsis.com/archives/bugtraq/2002-10/0385.html http://www.iss.net/security_center/static/10489.php http://www.osvdb.org/4284 http://www.securityfocus.com/bid/6056 •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 3

CVE-2002-2255 – phpBB 2.0.3 - 'search.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2002-2255

Cross-site scripting (XSS) vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the search_username parameter in searchuser mode. • https://www.exploit-db.com/exploits/22065 http://archives.neohapsis.com/archives/bugtraq/2002-12/0053.html http://www.securityfocus.com/bid/6311 https://exchange.xforce.ibmcloud.com/vulnerabilities/10773 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •