Approved changes feed: RSS · Atom

cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*

part: a version: 2.0.1 update: *

VendorPhpbb Group (b7cc37b4-8895-556d-8454-6a4fe1da6960)
ProductPhpbb (d9104123-6a84-5cbf-bbd7-9e906abc49dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/punbb/punbb purl2cpe 2026-06-01 10:15:23.742580

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-6421 vulnerable 2026-06-08 04:49:28.808852 Details available
Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user.
Published: 2006-12-10T11:00:00.000Z
Updated: 2024-08-07T20:26:46.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5209 vulnerable 2026-06-08 04:49:20.024287 Details available
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Published: 2006-10-09T19:00:00.000Z
Updated: 2024-08-07T19:41:04.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2865 vulnerable 2026-06-08 04:49:07.719058 Details available
PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possible that this is a site-specific vulnerability, or an issue in a mod
Published: 2006-06-06T20:03:00.000Z
Updated: 2024-08-07T18:06:27.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2134 vulnerable 2026-06-08 04:48:58.979380 Details available
PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
Published: 2006-05-02T10:00:00.000Z
Updated: 2024-08-07T17:35:31.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0632 vulnerable 2026-06-08 04:48:54.713909 Details available
The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activation key ("validation ID") that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or create new accounts.
Published: 2006-02-10T11:00:00.000Z
Updated: 2024-08-07T16:41:28.998Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0450 vulnerable 2026-06-08 04:48:53.900135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0438 vulnerable 2026-06-08 04:48:53.875667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3537 vulnerable 2026-06-08 04:48:41.098550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3536 vulnerable 2026-06-08 04:48:41.097651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3420 vulnerable 2026-06-08 04:48:40.702981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3419 vulnerable 2026-06-08 04:48:40.702125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3418 vulnerable 2026-06-08 04:48:40.701263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3417 vulnerable 2026-06-08 04:48:40.700252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3416 vulnerable 2026-06-08 04:48:40.699332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3415 vulnerable 2026-06-08 04:48:40.686430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1290 vulnerable 2026-06-08 04:48:26.289848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1193 vulnerable 2026-06-08 04:48:25.891749 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1115 vulnerable 2026-06-08 04:48:25.470930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1114 vulnerable 2026-06-08 04:48:25.467123 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1047 vulnerable 2026-06-08 04:48:25.211770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0659 vulnerable 2026-06-08 04:48:13.254466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0614 vulnerable 2026-06-08 04:48:13.170077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0603 vulnerable 2026-06-08 04:48:13.122919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0259 vulnerable 2026-06-08 04:48:12.147834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0258 vulnerable 2026-06-08 04:48:12.144539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2350 vulnerable 2026-06-08 04:48:09.367310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2055 vulnerable 2026-06-08 04:48:08.414029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2054 vulnerable 2026-06-08 04:48:08.411072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1950 vulnerable 2026-06-08 04:48:08.113261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1943 vulnerable 2026-06-08 04:48:08.090759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1809 vulnerable 2026-06-08 04:48:07.705410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1535 vulnerable 2026-06-08 04:47:54.479170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1315 vulnerable 2026-06-08 04:47:53.588967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0339 vulnerable 2026-06-08 04:47:49.445531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1244 vulnerable 2026-06-08 04:47:23.773968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1216 vulnerable 2026-06-08 04:47:23.692495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1215 vulnerable 2026-06-08 04:47:23.687660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2176 vulnerable 2026-06-08 04:47:19.272198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1707 vulnerable 2026-06-08 04:47:17.887527 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.