GCVE - cpe:2.3:a:phpbb_group:phpbb:1.0.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpbb_group:phpbb:1.0.1:*:*:*:*:*:*:*

part: a version: 1.0.1 update: *

Vendor	Phpbb Group (`b7cc37b4-8895-556d-8454-6a4fe1da6960`)
Product	Phpbb (`d9104123-6a84-5cbf-bbd7-9e906abc49dd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/punbb/punbb`	purl2cpe	2026-06-01 10:15:23.733509

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-2134`	vulnerable	2026-06-08 04:48:58.975956	Details available PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Published: 2006-05-02T10:00:00.000Z Updated: 2024-08-07T17:35:31.429Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/1728 http://www.securityfocus.com/bid/17763 http://secunia.com/advisories/19892 https://exchange.xforce.ibmcloud.com/vulnerabilities/26279 http://www.vupen.com/english/advisories/2006/1585	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0872`	vulnerable	2026-06-08 04:48:13.865814	Details available Cross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the start parameter. Published: 2005-03-26T05:00:00.000Z Updated: 2024-08-07T21:28:28.907Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/19821 http://marc.info/?l=bugtraq&m=111168190630576&w=2 http://secunia.com/advisories/14659 http://securitytracker.com/id?1013554	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0871`	vulnerable	2026-06-08 04:48:13.865458	Details available calendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal the path in an error message. Published: 2005-03-26T05:00:00.000Z Updated: 2024-08-07T21:28:28.937Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/19824 http://marc.info/?l=bugtraq&m=111168190630576&w=2 http://secunia.com/advisories/14659 http://securitytracker.com/id?1013554	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1315`	vulnerable	2026-06-08 04:47:53.586706	Details available viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into the result, which is then processed by PHP exec, as exploited by the Santy.A worm. Published: 2004-12-31T05:00:00.000Z Updated: 2024-08-08T00:46:12.359Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/10701 https://security.gentoo.org/glsa/200411-32 http://marc.info/?l=bugtraq&m=110365752909029&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/18052 http://www.phpbb.com/phpBB/viewtopic.php?t=240513	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.