Phpbp

phpbp

3 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-1408 1Phpbp 1Phpbp Apr 23, 2026 Mar 20, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 (2.204) FIX 4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a banner_out action.
CVE-2007-0370 1Phpbp 1Phpbp Apr 23, 2026 Jan 19, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to inject arbitrary PHP code into an upload/banners/ file via a banners add operation that uploads the PHP...Show more Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to inject arbitrary PHP code into an upload/banners/ file via a banners add operation that uploads the PHP code through an image_form parameter specifying a multiple-extension filename such as .jpg.vil.gif.php, which is stored in upload/banners/ under a different name, and executable via a direct request. NOTE: a separate SQL injection issue could be leveraged to make this vulnerability reachable by remote unauthenticated attackers.Show less
CVE-2007-0369 1Phpbp 1Phpbp Apr 23, 2026 Jan 19, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to execute arbitrary SQL commands via the comment forum.