CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0CVE-2006-6839
https://notcve.org/view.php?id=CVE-2006-6839
Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redirection targets." Vulnerabilidad no especificada en phpBB anterior a 2.0.22 tiene un impacto desconocido y vectores remotos de ataque relacionados con " criterios para los “malos” objetivos de redirección". • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=405980 http://secunia.com/advisories/28871 http://www.debian.org/security/2008/dsa-1488 http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624 http://www.securityfocus.com/bid/21806 •
CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0CVE-2006-6840
https://notcve.org/view.php?id=CVE-2006-6840
Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter." Vulnerabilidad no especificada en phpBB anterior a 2.0.22 tiene un impacto desconocido y vectores de ataque remotos relacionados con "parámetro start negativo". • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=405980 http://secunia.com/advisories/28871 http://www.debian.org/security/2008/dsa-1488 http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624 http://www.securityfocus.com/bid/21806 •
CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0CVE-2006-6841
https://notcve.org/view.php?id=CVE-2006-6841
Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors. Ciertas formas en phpBB anterior a 2.0.22 carecen de chequeo de sesiones, lo cual tiene un impacto desconocido y vectores de ataque remotos. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=405980 http://secunia.com/advisories/28871 http://www.debian.org/security/2008/dsa-1488 http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624 http://www.securityfocus.com/bid/21806 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2006-5435
https://notcve.org/view.php?id=CVE-2006-5435
PHP remote file inclusion vulnerability in groupcp.php in phpBB 2.0.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: CVE and the vendor dispute this vulnerability because $phpbb_root_path is defined before use ** IMPUGNADA ** Vulnerabilidad PHP de inclusión remota de archivo en groupcp.php en phpBB 2.0.10 y anteriores permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámeto phpbb_root_path. NOTA: el CVE y el fabricante niegan esta vulnerabilidad porque $phpbb_root_path se define antes de usarlo. • http://www.securityfocus.com/archive/1/449114/100/0/threaded http://www.securityfocus.com/archive/1/449232/100/0/threaded •
CVSS: 5.1EPSS: 6%CPEs: 16EXPL: 2CVE-2006-2134 – Knowledge Base Mod 2.0.2 - 'phpBB' Remote File Inclusion
https://notcve.org/view.php?id=CVE-2006-2134
PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. • https://www.exploit-db.com/exploits/1728 http://secunia.com/advisories/19892 http://www.securityfocus.com/bid/17763 http://www.vupen.com/english/advisories/2006/1585 https://exchange.xforce.ibmcloud.com/vulnerabilities/26279 •