Page 6 of 29 results (0.010 seconds)

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 2

SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter. Vulnerabilidad de inyección de SQL en viewtopic.php de phpBB 2.0.5 y anteriores permite a atacantes remotos robar picadillos (hashes) de contraseñas mediante el parámetro topic_id. • https://www.exploit-db.com/exploits/44 http://marc.info/?l=bugtraq&m=105607263130644&w=2 http://www.phpbb.com/phpBB/viewtopic.php?t=112052 http://www.securityfocus.com/bid/7979 https://exchange.xforce.ibmcloud.com/vulnerabilities/12366 •

CVSS: 5.0EPSS: 1%CPEs: 7EXPL: 0

phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters within [code] tags. • http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0005.html http://marc.info/?l=bugtraq&m=101794993119738&w=2 http://online.securityfocus.com/archive/1/265798 http://www.iss.net/security_center/static/8764.php http://www.securityfocus.com/bid/4432 http://www.securityfocus.com/bid/4434 •

CVSS: 5.1EPSS: 0%CPEs: 7EXPL: 0

Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message. • http://www.iss.net/security_center/static/7459.php http://www.securiteam.com/unixfocus/6W00Q202UM.html http://www.securityfocus.com/bid/4379 •

CVSS: 8.8EPSS: 1%CPEs: 1EXPL: 2

prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) $l_privnotify in auth.php from being properly initialized, which can be modified by the user and later used in an eval statement. • https://www.exploit-db.com/exploits/21065 http://archives.neohapsis.com/archives/bugtraq/2001-08/0123.html http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-08/0087.html http://www.kb.cert.org/vuls/id/920931 http://www.securityfocus.com/bid/3167 https://exchange.xforce.ibmcloud.com/vulnerabilities/6944 • CWE-665: Improper Initialization •