← Back

Mxbb

mxbb

16 CVEs • 16 products

Products (16)

Click to collapse
Toggle
Kb Mods
kb_mods
2 CVEs
Mxbb Portal
mxbb_portal
1 CVE
Mxbb Smartor Album
mxbb_smartor_album
1 CVE
Calsnails Module
calsnails_module
1 CVE
Mx Tinies
mx_tinies
1 CVE
Mxbb Newssuite
mxbb_newssuite
1 CVE
Modsdb
modsdb
1 CVE
Mxbb
mxbb
1 CVE
Activity Games Module
activity_games_module
1 CVE
Mxbb Meeting
mxbb_meeting
1 CVE
Mxbb Web Links
mxbb_web_links
1 CVE
Mxbb Charts
mxbb_charts
1 CVE
Mx Shotcast
mx_shotcast
1 CVE
Mxbb Faq
mxbb_faq
1 CVE
Mxbb Rules
mxbb_rules
1 CVE
Mx Glance
mx_glance
1 CVE

CVEs (16)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-5178
1Mxbb
1Mx Glance
Apr 23, 2026
Oct 3, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion...Show more
contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via a URL in the mx_root_path parameter. NOTE: some sources incorrectly state that phpbb_root_path is the affected parameter.Show less
CVE-2007-2493
1Mxbb
2Mxbb Faq
Mxbb Rules
Apr 23, 2026
May 4, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
PHP remote file inclusion vulnerability in faq.php in the FAQ & RULES 2.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
CVE-2007-2313
1Mxbb
1Mx Shotcast
Apr 23, 2026
Apr 26, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.
CVE-2006-6650
1Mxbb
1Mxbb Charts
Apr 23, 2026
Dec 20, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHP remote file inclusion vulnerability in charts_constants.php in the Charts (mx_charts) 1.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path paramete...Show more
PHP remote file inclusion vulnerability in charts_constants.php in the Charts (mx_charts) 1.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.Show less
CVE-2006-6645
1Mxbb
1Mxbb Web Links
Apr 23, 2026
Dec 20, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in language/lang_english/lang_admin.php in the Web Links (mx_links) 2.05 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_...Show more
PHP remote file inclusion vulnerability in language/lang_english/lang_admin.php in the Web Links (mx_links) 2.05 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.Show less
CVE-2006-6644
1Mxbb
1Mxbb Meeting
Apr 23, 2026
Dec 20, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHP remote file inclusion vulnerability in pages/meeting_constants.php in the Meeting (mx_meeting) 1.1.2 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path...Show more
PHP remote file inclusion vulnerability in pages/meeting_constants.php in the Meeting (mx_meeting) 1.1.2 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.Show less
CVE-2006-6615
1Mxbb
1Activity Games Module
Apr 23, 2026
Dec 18, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in includes/act_constants.php in the Activity Games (mx_act) 0.92 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
CVE-2006-6568
1Mxbb
1Kb Mods
Apr 23, 2026
Dec 15, 2006
N/A· v4
N/A· v3
10.0 HIGH· v2
Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the phpEx parameter.
CVE-2006-6567
1Mxbb
1Kb Mods
Apr 23, 2026
Dec 15, 2006
N/A· v4
N/A· v3
10.0 HIGH· v2
PHP remote file inclusion vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
CVE-2006-6566
1Mxbb
1Mxbb
Apr 23, 2026
Dec 15, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in includes/profilcp_constants.php in the Profile Control Panel (CPanel) module for mxBB 0.91c allows remote attackers to execute arbitrary PHP code via a URL in the module_root_pa...Show more
PHP remote file inclusion vulnerability in includes/profilcp_constants.php in the Profile Control Panel (CPanel) module for mxBB 0.91c allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.Show less
CVE-2006-6560
1Mxbb
1Modsdb
Apr 23, 2026
Dec 14, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) Portal allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path paramet...Show more
PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) Portal allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.Show less
CVE-2006-6553
1Mxbb
1Mxbb Newssuite
Apr 23, 2026
Dec 14, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in includes/newssuite_constants.php in the NewsSuite 1.03 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.
CVE-2006-6295
1Mxbb
1Mx Tinies
Apr 23, 2026
Dec 5, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHP remote file inclusion vulnerability in includes/mx_common.php in the mx_tinies 1.3.0 Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
CVE-2006-6065
1Mxbb
1Calsnails Module
Apr 23, 2026
Nov 22, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
PHP remote file inclusion vulnerability in includes/mx_common.php in the CalSnails Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
CVE-2006-5803
1Mxbb
1Mxbb Smartor Album
Apr 23, 2026
Nov 8, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in modules/mx_smartor/album.php in the mxBB Smartor Album module 1.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
CVE-2006-2361
2Mxbb
Php Arena
2Mxbb Portal
Pafiledb
Apr 16, 2026
May 15, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration, as used with phpBB, allows remote attackers to execute arbitrary PHP code via a URL in the module_root_pa...Show more
PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration, as used with phpBB, allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.Show less