Page 5 of 35 results (0.002 seconds)

CVSS: 5.1EPSS: 6%CPEs: 16EXPL: 2

CVE-2006-2134 – Knowledge Base Mod 2.0.2 - 'phpBB' Remote File Inclusion

https://notcve.org/view.php?id=CVE-2006-2134

PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. • https://www.exploit-db.com/exploits/1728 http://secunia.com/advisories/19892 http://www.securityfocus.com/bid/17763 http://www.vupen.com/english/advisories/2006/1585 https://exchange.xforce.ibmcloud.com/vulnerabilities/26279 •

CVSS: 4.3EPSS: 87%CPEs: 1EXPL: 3

CVE-2005-0872 – Topic Calendar 1.0.1 - 'Calendar_Scheduler.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2005-0872

Cross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the start parameter. • https://www.exploit-db.com/exploits/25270 http://marc.info/?l=bugtraq&m=111168190630576&w=2 http://secunia.com/advisories/14659 http://securitytracker.com/id?1013554 https://exchange.xforce.ibmcloud.com/vulnerabilities/19821 •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2005-0871

https://notcve.org/view.php?id=CVE-2005-0871

calendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal the path in an error message. • http://marc.info/?l=bugtraq&m=111168190630576&w=2 http://secunia.com/advisories/14659 http://securitytracker.com/id?1013554 https://exchange.xforce.ibmcloud.com/vulnerabilities/19824 •

CVSS: 5.0EPSS: 0%CPEs: 30EXPL: 2

CVE-2005-0659

https://notcve.org/view.php?id=CVE-2005-0659

phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message. • http://marc.info/?l=bugtraq&m=110996579900134&w=2 http://neosecurityteam.net/Advisories/Advisory-09.txt http://neosecurityteam.tk/index.php?pagina=advisories&id=9 http://securitytracker.com/id?1013377 •

CVSS: 7.5EPSS: 4%CPEs: 29EXPL: 3

CVE-2005-0614 – phpBB 2.0.12 - Change User Rights Authentication Bypass

https://notcve.org/view.php?id=CVE-2005-0614

sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie. • https://www.exploit-db.com/exploits/897 https://www.exploit-db.com/exploits/871 https://www.exploit-db.com/exploits/889 http://marc.info/?l=bugtraq&m=110970201920206&w=2 http://marc.info/?l=bugtraq&m=110999268130739&w=2 http://secunia.com/advisories/14413 http://www.phpbb.com/phpBB/viewtopic.php?t=267563 •