Approved changes feed: RSS · Atom

cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*

part: a version: 2.0_rc2 update: *

VendorPhpbb Group (b7cc37b4-8895-556d-8454-6a4fe1da6960)
ProductPhpbb (d9104123-6a84-5cbf-bbd7-9e906abc49dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/punbb/punbb purl2cpe 2026-06-01 10:15:23.769379

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-6421 vulnerable 2026-06-08 04:49:28.821694 Details available
Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user.
Published: 2006-12-10T11:00:00.000Z
Updated: 2024-08-07T20:26:46.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5209 vulnerable 2026-06-08 04:49:20.037185 Details available
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Published: 2006-10-09T19:00:00.000Z
Updated: 2024-08-07T19:41:04.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2865 vulnerable 2026-06-08 04:49:07.731931 Details available
PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possible that this is a site-specific vulnerability, or an issue in a mod
Published: 2006-06-06T20:03:00.000Z
Updated: 2024-08-07T18:06:27.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2134 vulnerable 2026-06-08 04:48:58.979442 Details available
PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
Published: 2006-05-02T10:00:00.000Z
Updated: 2024-08-07T17:35:31.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0632 vulnerable 2026-06-08 04:48:54.714502 Details available
The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activation key ("validation ID") that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or create new accounts.
Published: 2006-02-10T11:00:00.000Z
Updated: 2024-08-07T16:41:28.998Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0450 vulnerable 2026-06-08 04:48:53.900583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0438 vulnerable 2026-06-08 04:48:53.881777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3537 vulnerable 2026-06-08 04:48:41.098934 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3536 vulnerable 2026-06-08 04:48:41.098078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3420 vulnerable 2026-06-08 04:48:40.703417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3419 vulnerable 2026-06-08 04:48:40.702496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3418 vulnerable 2026-06-08 04:48:40.701636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3417 vulnerable 2026-06-08 04:48:40.700728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3416 vulnerable 2026-06-08 04:48:40.699724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3415 vulnerable 2026-06-08 04:48:40.697746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1193 vulnerable 2026-06-08 04:48:25.892097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1047 vulnerable 2026-06-08 04:48:25.224475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0659 vulnerable 2026-06-08 04:48:13.257727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0614 vulnerable 2026-06-08 04:48:13.173429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0603 vulnerable 2026-06-08 04:48:13.123230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0259 vulnerable 2026-06-08 04:48:12.148124 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0258 vulnerable 2026-06-08 04:48:12.147330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2350 vulnerable 2026-06-08 04:48:09.367464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2055 vulnerable 2026-06-08 04:48:08.414296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2054 vulnerable 2026-06-08 04:48:08.413433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1943 vulnerable 2026-06-08 04:48:08.094601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1809 vulnerable 2026-06-08 04:48:07.709830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1315 vulnerable 2026-06-08 04:47:53.595046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1216 vulnerable 2026-06-08 04:47:23.692632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1215 vulnerable 2026-06-08 04:47:23.691669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1707 vulnerable 2026-06-08 04:47:17.889081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0902 vulnerable 2026-06-08 04:46:22.491518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0473 vulnerable 2026-06-08 04:46:21.513843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.