CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 2CVE-2003-0486 – phpBB 2.0.5 - SQL Injection Password Disclosure
https://notcve.org/view.php?id=CVE-2003-0486
SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter. Vulnerabilidad de inyección de SQL en viewtopic.php de phpBB 2.0.5 y anteriores permite a atacantes remotos robar picadillos (hashes) de contraseñas mediante el parámetro topic_id. • https://www.exploit-db.com/exploits/44 http://marc.info/?l=bugtraq&m=105607263130644&w=2 http://www.phpbb.com/phpBB/viewtopic.php?t=112052 http://www.securityfocus.com/bid/7979 https://exchange.xforce.ibmcloud.com/vulnerabilities/12366 •
CVSS: 5.0EPSS: 1%CPEs: 7EXPL: 0CVE-2002-0533
https://notcve.org/view.php?id=CVE-2002-0533
phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters within [code] tags. • http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0005.html http://marc.info/?l=bugtraq&m=101794993119738&w=2 http://online.securityfocus.com/archive/1/265798 http://www.iss.net/security_center/static/8764.php http://www.securityfocus.com/bid/4432 http://www.securityfocus.com/bid/4434 •
CVSS: 5.1EPSS: 0%CPEs: 7EXPL: 0CVE-2002-0475
https://notcve.org/view.php?id=CVE-2002-0475
Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message. • http://www.iss.net/security_center/static/7459.php http://www.securiteam.com/unixfocus/6W00Q202UM.html http://www.securityfocus.com/bid/4379 •
CVSS: 8.8EPSS: 1%CPEs: 1EXPL: 2CVE-2001-1471 – phpBB 1.x - Page Header Arbitrary Command Execution
https://notcve.org/view.php?id=CVE-2001-1471
prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) $l_privnotify in auth.php from being properly initialized, which can be modified by the user and later used in an eval statement. • https://www.exploit-db.com/exploits/21065 http://archives.neohapsis.com/archives/bugtraq/2001-08/0123.html http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-08/0087.html http://www.kb.cert.org/vuls/id/920931 http://www.securityfocus.com/bid/3167 https://exchange.xforce.ibmcloud.com/vulnerabilities/6944 • CWE-665: Improper Initialization •