Vulnerabilities (CVE)

Filtered by vendor Phpbb Group Subscribe
Filtered by product Phpbb
Total 82 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-2055 1 Phpbb Group 1 Phpbb 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the search_author parameter.
CVE-2006-2865 1 Phpbb Group 1 Phpbb 2025-04-03 7.5 HIGH N/A
PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possible that this is a site-specific vulnerability, or an issue in a mod