Approved changes feed: RSS · Atom

cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*

part: a version: 2.0_rc4 update: *

VendorPhpbb Group (b7cc37b4-8895-556d-8454-6a4fe1da6960)
ProductPhpbb (d9104123-6a84-5cbf-bbd7-9e906abc49dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/punbb/punbb purl2cpe 2026-06-01 10:15:23.771125

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-6421 vulnerable 2026-06-08 04:49:28.822674 Details available
Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user.
Published: 2006-12-10T11:00:00.000Z
Updated: 2024-08-07T20:26:46.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5209 vulnerable 2026-06-08 04:49:20.038202 Details available
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Published: 2006-10-09T19:00:00.000Z
Updated: 2024-08-07T19:41:04.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2865 vulnerable 2026-06-08 04:49:07.732927 Details available
PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possible that this is a site-specific vulnerability, or an issue in a mod
Published: 2006-06-06T20:03:00.000Z
Updated: 2024-08-07T18:06:27.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2134 vulnerable 2026-06-08 04:48:58.979483 Details available
PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
Published: 2006-05-02T10:00:00.000Z
Updated: 2024-08-07T17:35:31.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0632 vulnerable 2026-06-08 04:48:54.714537 Details available
The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activation key ("validation ID") that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or create new accounts.
Published: 2006-02-10T11:00:00.000Z
Updated: 2024-08-07T16:41:28.998Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0450 vulnerable 2026-06-08 04:48:53.900617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0438 vulnerable 2026-06-08 04:48:53.882809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3537 vulnerable 2026-06-08 04:48:41.098968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3536 vulnerable 2026-06-08 04:48:41.098114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3420 vulnerable 2026-06-08 04:48:40.703448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3419 vulnerable 2026-06-08 04:48:40.702528 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3418 vulnerable 2026-06-08 04:48:40.701667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3417 vulnerable 2026-06-08 04:48:40.700761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3416 vulnerable 2026-06-08 04:48:40.699756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3415 vulnerable 2026-06-08 04:48:40.698760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1193 vulnerable 2026-06-08 04:48:25.892132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1047 vulnerable 2026-06-08 04:48:25.225909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0659 vulnerable 2026-06-08 04:48:13.257763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0614 vulnerable 2026-06-08 04:48:13.173466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0603 vulnerable 2026-06-08 04:48:13.123266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0259 vulnerable 2026-06-08 04:48:12.148165 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0258 vulnerable 2026-06-08 04:48:12.147372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2350 vulnerable 2026-06-08 04:48:09.367506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2055 vulnerable 2026-06-08 04:48:08.414329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2054 vulnerable 2026-06-08 04:48:08.413473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1943 vulnerable 2026-06-08 04:48:08.094642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1809 vulnerable 2026-06-08 04:48:07.710945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1315 vulnerable 2026-06-08 04:47:53.595858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0339 vulnerable 2026-06-08 04:47:49.449419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1216 vulnerable 2026-06-08 04:47:23.692790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1215 vulnerable 2026-06-08 04:47:23.691712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1707 vulnerable 2026-06-08 04:47:17.890853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0902 vulnerable 2026-06-08 04:46:22.492624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.