Approved changes feed: RSS · Atom
cpe:2.3:a:phpbb_group:phpbb:1.4.0:*:*:*:*:*:*:*
part: a version: 1.4.0 update: *
| Vendor | Phpbb Group (b7cc37b4-8895-556d-8454-6a4fe1da6960) |
|---|---|
| Product | Phpbb (d9104123-6a84-5cbf-bbd7-9e906abc49dd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/punbb/punbb |
purl2cpe | 2026-06-01 10:15:23.737232 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-2134 |
vulnerable | 2026-06-08 04:48:58.977689 |
Details available
PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
Published: 2006-05-02T10:00:00.000Z
Updated: 2024-08-07T17:35:31.429Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0659 |
vulnerable | 2026-06-08 04:48:13.254380 |
Details available
phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message.
Published: 2005-03-07T05:00:00.000Z
Updated: 2024-08-07T21:21:06.662Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0614 |
vulnerable | 2026-06-08 04:48:13.169987 |
Details available
sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie.
Published: 2005-03-03T05:00:00.000Z
Updated: 2024-08-07T21:21:06.510Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2350 |
vulnerable | 2026-06-08 04:48:09.365657 |
Details available
SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the search_results parameter.
Published: 2005-08-16T04:00:00.000Z
Updated: 2024-08-08T01:22:13.651Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1315 |
vulnerable | 2026-06-08 04:47:53.587735 |
Details available
viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into the result, which is then processed by PHP exec, as exploited by the Santy.A worm.
Published: 2004-12-31T05:00:00.000Z
Updated: 2024-08-08T00:46:12.359Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1373 |
vulnerable | 2026-06-08 04:47:47.436106 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1216 |
vulnerable | 2026-06-08 04:47:23.692409 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1215 |
vulnerable | 2026-06-08 04:47:23.686028 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0533 |
vulnerable | 2026-06-08 04:46:21.639370 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0475 |
vulnerable | 2026-06-08 04:46:21.518649 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-1472 |
vulnerable | 2026-06-08 04:46:20.104294 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.