Approved changes feed: RSS · Atom
cpe:2.3:a:phpbb_group:phpbb:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Phpbb Group (b7cc37b4-8895-556d-8454-6a4fe1da6960) |
|---|---|
| Product | Phpbb (d9104123-6a84-5cbf-bbd7-9e906abc49dd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/punbb/punbb |
purl2cpe | 2026-06-01 10:15:23.731526 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-5435 |
vulnerable | 2026-06-08 04:49:20.494305 |
Details available
PHP remote file inclusion vulnerability in groupcp.php in phpBB 2.0.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: CVE and the vendor dispute this vulnerability because $phpbb_root_path is defined before use
Published: 2006-10-20T23:00:00.000Z
Updated: 2024-08-07T19:48:30.235Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2360 |
vulnerable | 2026-06-08 04:49:06.379995 |
Details available
SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter.
Published: 2006-05-15T16:00:00.000Z
Updated: 2024-08-07T17:51:03.473Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2359 |
vulnerable | 2026-06-08 04:49:06.379635 |
Details available
Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection.
Published: 2006-05-15T16:00:00.000Z
Updated: 2024-08-07T17:51:03.485Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2134 |
vulnerable | 2026-06-08 04:48:58.973846 |
Details available
PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
Published: 2006-05-02T10:00:00.000Z
Updated: 2024-08-07T17:35:31.429Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1896 |
vulnerable | 2026-06-08 04:48:58.329083 |
Details available
Unspecified vulnerability in phpBB allows remote authenticated users with Administration Panel access to execute arbitrary PHP code via crafted Font Colour 3 ($theme[fontcolor3] variable) and/or signature values, possibly involving the highlight functionality. NOTE: the original report does not clarify whether this issue is static code injection, eval injection, or another type of vulnerability.
Published: 2006-04-20T10:00:00.000Z
Updated: 2024-08-07T17:27:29.457Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1196 |
vulnerable | 2026-06-08 04:48:25.911964 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1116 |
vulnerable | 2026-06-08 04:48:25.492711 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1315 |
vulnerable | 2026-06-08 04:47:53.585281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0486 |
vulnerable | 2026-06-08 04:47:21.630290 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0484 |
vulnerable | 2026-06-08 04:47:21.628538 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.