CVSS: 7.5EPSS: 3%CPEs: 16EXPL: 1CVE-2004-1535 – phpBB 2.0.x - 'admin_cash.php' PHP Remote File Inclusion
https://notcve.org/view.php?id=CVE-2004-1535
PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_path parameter to reference a URL on a remote web server that contains the code. • https://www.exploit-db.com/exploits/24751 http://marc.info/?l=bugtraq&m=110075903308817&w=2 http://marc.info/?l=bugtraq&m=110082153702843&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/18151 •
CVSS: 4.3EPSS: 0%CPEs: 13EXPL: 0CVE-2004-1809
https://notcve.org/view.php?id=CVE-2004-1809
Cross-site scripting (XSS) vulnerability in phpBB 2.0.6d and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) postdays parameter to viewtopic.php or (2) topicdays parameter to viewforum.php. • http://marc.info/?l=bugtraq&m=107920498205324&w=2 http://secunia.com/advisories/11121 http://www.osvdb.org/4257 http://www.osvdb.org/4259 http://www.phpbb.com/support/documents.php?mode=changelog#206 http://www.securityfocus.com/bid/9865 http://www.securityfocus.com/bid/9866 https://exchange.xforce.ibmcloud.com/vulnerabilities/15464 •
CVSS: 7.5EPSS: 0%CPEs: 19EXPL: 3CVE-2004-2350 – phpBB 1.x/2.0.x - 'search.php?search_results' SQL Injection
https://notcve.org/view.php?id=CVE-2004-2350
SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the search_results parameter. • https://www.exploit-db.com/exploits/23821 http://www.securityfocus.com/archive/1/357442 http://www.securityfocus.com/bid/9883 https://exchange.xforce.ibmcloud.com/vulnerabilities/15475 •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 2CVE-2004-2358
https://notcve.org/view.php?id=CVE-2004-2358
Cross-site scripting (XSS) vulnerability in admin_words.php for phpBB 2.0.6c allows remote attackers to inject arbitrary web script or HTML via the id parameter. • http://archives.neohapsis.com/archives/bugtraq/2004-03/0219.html http://www.securityfocus.com/bid/9896 https://exchange.xforce.ibmcloud.com/vulnerabilities/15579 •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 3CVE-2004-2130 – phpBB 2.0.6 - 'privmsg.php' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2004-2130
Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the (1) folder or (2) mode variables. • https://www.exploit-db.com/exploits/23475 http://marc.info/?l=bugtraq&m=107530946123822&w=2 http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943 http://www.securityfocus.com/bid/9290 •