GCVE - cpe:2.3:a:phpbb_group:phpbb:2.0.19:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpbb_group:phpbb:2.0.19:*:*:*:*:*:*:*

part: a version: 2.0.19 update: *

Vendor	Phpbb Group (`b7cc37b4-8895-556d-8454-6a4fe1da6960`)
Product	Phpbb (`d9104123-6a84-5cbf-bbd7-9e906abc49dd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/punbb/punbb`	purl2cpe	2026-06-01 10:15:23.751915

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-1695`	vulnerable	2026-06-08 04:49:43.268376	Details available PHP remote file inclusion vulnerability in includes/usercp_register.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: this issue has been disputed by third-party researchers, stating that the file checks for a global constant and cannot be accessed directly Published: 2007-03-27T01:00:00.000Z Updated: 2024-08-07T13:06:26.071Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/463817/100/0/threaded http://www.securityfocus.com/archive/1/463718/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6421`	vulnerable	2026-06-08 04:49:28.819353	Details available Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user. Published: 2006-12-10T11:00:00.000Z Updated: 2024-08-07T20:26:46.001Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/30776 http://www.securityfocus.com/archive/1/456579/100/0/threaded http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624 http://www.securityfocus.com/archive/1/456728/100/100/threaded http://www.securityfocus.com/bid/22001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5209`	vulnerable	2026-06-08 04:49:20.035278	Details available PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Published: 2006-10-09T19:00:00.000Z Updated: 2024-08-07T19:41:04.605Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/29345 https://www.exploit-db.com/exploits/2475/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2865`	vulnerable	2026-06-08 04:49:07.730112	Details available PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possible that this is a site-specific vulnerability, or an issue in a mod Published: 2006-06-06T20:03:00.000Z Updated: 2024-08-07T18:06:27.206Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/435995/100/0/threaded http://www.securityfocus.com/archive/1/435869/100/0/threaded http://www.securityfocus.com/bid/18255 http://www.securityfocus.com/archive/1/436118/100/0/threaded http://www.securityfocus.com/archive/1/435978/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1775`	vulnerable	2026-06-08 04:48:58.022416	Details available Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.19 allow remote attackers to inject arbitrary web script or HTML via the (1) Site Description field in (a) admin_board.php, the (2) Group name and (3) Group description fields in (b) admin_groups.php and (c) groupcp.php, the (4) Theme Name field in (d) admin_styles.php, and the (5) Rank Title field in (e) admin_ranks.php. NOTE: the profile.php/Current password vector is already covered by CVE-2006-1603. Published: 2006-04-13T10:00:00.000Z Updated: 2024-09-16T23:42:21.730Z Open on db.gcve.eu Reference links http://osvdb.org/ref/24/24353-phpbb.txt http://www.osvdb.org/24354 http://www.osvdb.org/24357 http://www.osvdb.org/24355 http://www.osvdb.org/24356	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1603`	vulnerable	2026-06-08 04:48:57.577410	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0632`	vulnerable	2026-06-08 04:48:54.714446	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0450`	vulnerable	2026-06-08 04:48:53.900533	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0438`	vulnerable	2026-06-08 04:48:53.878651	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0437`	vulnerable	2026-06-08 04:48:53.873777	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0063`	vulnerable	2026-06-08 04:48:45.868122	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.