GCVE - cpe:2.3:a:phpbb_group:phpbb:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpbb_group:phpbb:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

Vendor	Phpbb Group (`b7cc37b4-8895-556d-8454-6a4fe1da6960`)
Product	Phpbb (`d9104123-6a84-5cbf-bbd7-9e906abc49dd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/punbb/punbb`	purl2cpe	2026-06-01 10:15:23.740779

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-6421`	vulnerable	2026-06-08 04:49:28.807775	Details available Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user. Published: 2006-12-10T11:00:00.000Z Updated: 2024-08-07T20:26:46.001Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/30776 http://www.securityfocus.com/archive/1/456579/100/0/threaded http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624 http://www.securityfocus.com/archive/1/456728/100/100/threaded http://www.securityfocus.com/bid/22001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5209`	vulnerable	2026-06-08 04:49:20.023708	Details available PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Published: 2006-10-09T19:00:00.000Z Updated: 2024-08-07T19:41:04.605Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/29345 https://www.exploit-db.com/exploits/2475/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2865`	vulnerable	2026-06-08 04:49:07.718513	Details available PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possible that this is a site-specific vulnerability, or an issue in a mod Published: 2006-06-06T20:03:00.000Z Updated: 2024-08-07T18:06:27.206Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/435995/100/0/threaded http://www.securityfocus.com/archive/1/435869/100/0/threaded http://www.securityfocus.com/bid/18255 http://www.securityfocus.com/archive/1/436118/100/0/threaded http://www.securityfocus.com/archive/1/435978/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0339`	vulnerable	2026-06-08 04:47:49.444667	Details available Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter. Published: 2004-03-18T05:00:00.000Z Updated: 2024-08-08T00:17:14.338Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/15348 http://www.securityfocus.com/bid/9765 http://marc.info/?l=bugtraq&m=107799508130700&w=2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.