GCVE - cpe:2.3:a:phpbb_group:phpbb-auction:1.2m:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpbb_group:phpbb-auction:1.2m:*:*:*:*:*:*:*

part: a version: 1.2m update: *

Vendor	Phpbb Group (`b7cc37b4-8895-556d-8454-6a4fe1da6960`)
Product	Phpbb Auction (`fbec2ffc-09e9-5096-a674-bd8364c4a26c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-3940`	vulnerable	2026-06-08 04:49:10.560101	Details available Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1) the ar parameter in auction_room.php and (2) the u parameter in auction_store.php. NOTE: the auction_rating.php vector is already covered by CVE-2005-1234. NOTE: the original disclosure states that the product name is "PHP-Auction", but this is probably an error. Published: 2006-07-31T22:00:00.000Z Updated: 2024-08-07T18:48:39.331Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/28006 http://www.securityfocus.com/archive/1/441190/100/0/threaded http://www.securityfocus.com/bid/19179 http://securityreason.com/securityalert/1306 http://www.aria-security.net/advisory/phpauction.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2245`	vulnerable	2026-06-08 04:49:06.122111	Details available PHP remote file inclusion vulnerability in auction\auction_common.php in Auction mod 1.3m for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Published: 2006-05-09T10:00:00.000Z Updated: 2024-08-07T17:43:28.904Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/1641 http://secunia.com/advisories/19944 http://www.osvdb.org/25263 https://exchange.xforce.ibmcloud.com/vulnerabilities/26192 http://pridels0.blogspot.com/2006/05/phpbb-auction-mod-remote-file.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1235`	vulnerable	2026-06-08 04:48:26.000261	Details available auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, which leaks the full path in a PHP error message. Published: 2005-04-24T04:00:00.000Z Updated: 2024-08-07T21:44:06.206Z Open on db.gcve.eu Reference links http://secunia.com/advisories/15029 http://securitytracker.com/id?1013779 http://www.osvdb.org/15706 http://www.snkenjoi.com/secadv/secadv9.txt http://www.phpbb-auction.com/sutra5600.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1234`	vulnerable	2026-06-08 04:48:25.999841	Details available Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to auction_rating.php or (2) ar parameter to action_offer.php. Published: 2005-04-24T04:00:00.000Z Updated: 2024-08-07T21:44:05.394Z Open on db.gcve.eu Reference links http://www.snkenjoi.com/secadv/secadv9.txt http://www.securityfocus.com/archive/1/441190/100/0/threaded http://www.osvdb.org/15704 http://www.securityfocus.com/bid/13283 http://www.osvdb.org/15705	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.