← Back

Phpbb

phpbb

65 CVEs • 26 products

Products (26)

Click to collapse
Toggle
Phpbb
phpbb
40 CVEs
Advanced Quick Reply Hack
advanced_quick_reply_hack
1 CVE
Phpbbmod
phpbbmod
1 CVE
Spamblockermod
spamblockermod
1 CVE
Lat2cyr
lat2cyr
1 CVE
Journals System Module
journals_system_module
1 CVE
Prillian French
prillian_french
1 CVE
Ajax Shoutbox
ajax_shoutbox
1 CVE
Acp User Registration Module
acp_user_registration_module
1 CVE
Searchindexer
searchindexer
1 CVE
Toplist
toplist
1 CVE
Amazonia Mod
amazonia_mod
1 CVE
Ezboard Converter
ezboard_converter
1 CVE
Insert User
insert_user
1 CVE
Import Tools
import_tools
1 CVE
Maluinfo
maluinfo
1 CVE
Dimension
dimension
1 CVE
Mutant
mutant
1 CVE
Ip Tracking
ip-tracking
1 CVE
Supanav
supanav
1 CVE
Phpbb Plus
phpbb_plus
1 CVE
Garage
garage
1 CVE
123 Flash Chat Module
123_flash_chat_module
1 CVE
Module Xs
module_xs
1 CVE
Pjirc Module
pjirc_module
1 CVE
Tag Board
tag_board
1 CVE

CVEs (65)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-1961
1Phpbb
1Mutant
Apr 23, 2026
Apr 11, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in mutant_functions.php in the Mutant 0.9.2 portal for phpBB 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVE-2006-7174
1Phpbb
1Dimension
Apr 23, 2026
Mar 21, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
PHP remote file inclusion vulnerability in includes/functions.php in the Dimension module of phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: this may be the...Show more
PHP remote file inclusion vulnerability in includes/functions.php in the Dimension module of phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: this may be the same issue as CVE-2006-5235.Show less
CVE-2006-7168
1Phpbb
1Phpbb
Apr 23, 2026
Mar 20, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in includes/not_mem.php in the Add Name module for PHP allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVE-2006-7148
1Phpbb
1Maluinfo
Apr 23, 2026
Mar 7, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
PHP remote file inclusion vulnerability in includes/bb_usage_stats.php in maluinfo 206.2.38 for Brazilian PHPBB allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. NOTE: this might b...Show more
PHP remote file inclusion vulnerability in includes/bb_usage_stats.php in maluinfo 206.2.38 for Brazilian PHPBB allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. NOTE: this might be the same issues as CVE-2006-4893.Show less
CVE-2006-7147
1Phpbb
1Import Tools
Apr 23, 2026
Mar 7, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVE-2006-7100
1Phpbb
1Insert User
Apr 23, 2026
Mar 3, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Insert User 0.1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVE-2006-2220
1Phpbb
1Phpbb
Apr 23, 2026
Feb 8, 2007
N/A· v4
N/A· v3
5.0 MEDIUM· v2
phpBB 2.0.20 does not properly verify user-specified input variables used as limits to SQL queries, which allows remote attackers to obtain sensitive information via a negative LIMIT specification, as demonstrated by the...Show more
phpBB 2.0.20 does not properly verify user-specified input variables used as limits to SQL queries, which allows remote attackers to obtain sensitive information via a negative LIMIT specification, as demonstrated by the start parameter to memberlist.php, which reveals the SQL query in the resulting error message.Show less
CVE-2007-0762
1Phpbb
1Phpbb
Apr 23, 2026
Feb 6, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in includes/functions.php in phpBB++ Build 100 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVE-2007-0761
1Phpbb
1Ezboard Converter
Apr 23, 2026
Feb 6, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in config.php in phpBB ezBoard converter (ezconvert) 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the ezconvert_dir parameter.
CVE-2006-6593
1Phpbb
1Amazonia Mod
Apr 23, 2026
Dec 15, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in zufallscodepart.php in AMAZONIA MOD for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVE-2006-6459
1Phpbb
1Toplist
Apr 23, 2026
Dec 11, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in toplist.php in PhpBB Toplist 1.3.7 allows remote attackers to inject arbitrary HTML or web script via the (1) Name and (2) Information fields when adding a new site (toplistnew...Show more
Cross-site scripting (XSS) vulnerability in toplist.php in PhpBB Toplist 1.3.7 allows remote attackers to inject arbitrary HTML or web script via the (1) Name and (2) Information fields when adding a new site (toplistnew action).Show less
CVE-2006-5418
1Phpbb
1Searchindexer
Apr 23, 2026
Oct 20, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHP remote file inclusion vulnerability in archive/archive_topic.php in pbpbb archive for search engines (SearchIndexer) (aka phpBBSEI) for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the php...Show more
PHP remote file inclusion vulnerability in archive/archive_topic.php in pbpbb archive for search engines (SearchIndexer) (aka phpBBSEI) for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.Show less
CVE-2006-5390
1Phpbb
1Acp User Registration Module
Apr 23, 2026
Oct 18, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in the ACP User Registration (MMW) 1.00 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path p...Show more
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in the ACP User Registration (MMW) 1.00 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.Show less
CVE-2006-5312
1Phpbb
1Ajax Shoutbox
Apr 23, 2026
Oct 17, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVE-2006-5309
1Phpbb
1Prillian French
Apr 23, 2026
Oct 17, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb...Show more
PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.Show less
CVE-2006-5306
1Phpbb
1Journals System Module
Apr 23, 2026
Oct 17, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) in...Show more
Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/journals_delete.php, (2) includes/journals_post.php, or (3) includes/journals_edit.php.Show less
CVE-2006-5305
1Phpbb
1Lat2cyr
Apr 23, 2026
Oct 17, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVE-2006-5301
1Phpbb
1Spamblockermod
Apr 23, 2026
Oct 17, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVE-2006-5191
1Phpbb
1Phpbb
Apr 23, 2026
Oct 10, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_r...Show more
PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.Show less
CVE-2003-1530
1Phpbb
1Phpbb
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the mark[] parameter.