Approved changes feed: RSS · Atom

cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*

part: a version: 2.0_rc3 update: *

VendorPhpbb Group (b7cc37b4-8895-556d-8454-6a4fe1da6960)
ProductPhpbb (d9104123-6a84-5cbf-bbd7-9e906abc49dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/punbb/punbb purl2cpe 2026-06-01 10:15:23.770265

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-6421 vulnerable 2026-06-08 04:49:28.822201 Details available
Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user.
Published: 2006-12-10T11:00:00.000Z
Updated: 2024-08-07T20:26:46.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5209 vulnerable 2026-06-08 04:49:20.037684 Details available
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Published: 2006-10-09T19:00:00.000Z
Updated: 2024-08-07T19:41:04.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2865 vulnerable 2026-06-08 04:49:07.732463 Details available
PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possible that this is a site-specific vulnerability, or an issue in a mod
Published: 2006-06-06T20:03:00.000Z
Updated: 2024-08-07T18:06:27.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2134 vulnerable 2026-06-08 04:48:58.979465 Details available
PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
Published: 2006-05-02T10:00:00.000Z
Updated: 2024-08-07T17:35:31.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0632 vulnerable 2026-06-08 04:48:54.714520 Details available
The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activation key ("validation ID") that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or create new accounts.
Published: 2006-02-10T11:00:00.000Z
Updated: 2024-08-07T16:41:28.998Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0450 vulnerable 2026-06-08 04:48:53.900600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0438 vulnerable 2026-06-08 04:48:53.882328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3537 vulnerable 2026-06-08 04:48:41.098952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3536 vulnerable 2026-06-08 04:48:41.098096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3420 vulnerable 2026-06-08 04:48:40.703433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3419 vulnerable 2026-06-08 04:48:40.702512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3418 vulnerable 2026-06-08 04:48:40.701651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3417 vulnerable 2026-06-08 04:48:40.700745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3416 vulnerable 2026-06-08 04:48:40.699740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3415 vulnerable 2026-06-08 04:48:40.698238 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1193 vulnerable 2026-06-08 04:48:25.892115 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1047 vulnerable 2026-06-08 04:48:25.225424 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0659 vulnerable 2026-06-08 04:48:13.257746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0614 vulnerable 2026-06-08 04:48:13.173448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0603 vulnerable 2026-06-08 04:48:13.123249 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0259 vulnerable 2026-06-08 04:48:12.148141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0258 vulnerable 2026-06-08 04:48:12.147352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2350 vulnerable 2026-06-08 04:48:09.367487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2055 vulnerable 2026-06-08 04:48:08.414313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2054 vulnerable 2026-06-08 04:48:08.413454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1943 vulnerable 2026-06-08 04:48:08.094623 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1809 vulnerable 2026-06-08 04:48:07.710300 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1315 vulnerable 2026-06-08 04:47:53.595816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1216 vulnerable 2026-06-08 04:47:23.692649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1215 vulnerable 2026-06-08 04:47:23.691692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1707 vulnerable 2026-06-08 04:47:17.890217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0902 vulnerable 2026-06-08 04:46:22.491539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0473 vulnerable 2026-06-08 04:46:21.514741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.