phpBB 2.x - Secunia

Blog

Vulnerability Report: phpBB 2.x

This vulnerability report for phpBB 2.x contains a complete overview of all Secunia advisories affecting it. You can use this vulnerability report to ensure that you are aware of all vulnerabilities, both patched and unpatched, affecting this product allowing you to take the necessary precautions.

If you have information about a new or an existing vulnerability in phpBB 2.x then you are more than welcome to contact us.

1. Product Summary Only

2. Secunia Advisory Statistics (All time)

2.1. Statistics for 2013

2.2. Statistics for 2012

2.3. Statistics for 2011

2.4. Statistics for 2010

2.5. Statistics for 2009

2.6. Statistics for 2008

2.7. Statistics for 2007

2.8. Statistics for 2006

2.9. Statistics for 2005

2.10. Statistics for 2004

2.11. Statistics for 2003

3. List of Secunia Advisories (All time)

3.1. List for 2013

3.2. List for 2012

3.3. List for 2011

3.4. List for 2010

3.5. List for 2009

3.6. List for 2008

3.7. List for 2007

3.8. List for 2006

3.9. List for 2005

3.10. List for 2004

3.11. List for 2003

4. Send Feedback

Vendor, Links, and Unpatched Vulnerabilities

Vendor	phpBB

Product Link	View Here (Link to external site)

Affected By	38 Secunia advisories 27 Vulnerabilities

Monitor Product	Receive alerts for this product

Unpatched	0% (0 of 38 Secunia advisories)

Most Critical Unpatched There are no unpatched Secunia advisories affecting this product, when all vendor patches are applied..

7 Secunia Advisories in 2003

Secunia has issued a total of 7 Secunia advisories in 2003 for phpBB 2.x. Currently, 0% (0 out of 7) are marked as unpatched.

More information about the specific Secunia advisories affecting phpBB 2.x can be found below. Each Secunia advisory is enclosed by a box highlighted with a color representing its current patch status. You can read the complete Secunia advisories for thorough descriptions of the issues covered and for solution suggestions by clicking either the Secunia advisory title or the "Read More" links available for each Secunia advisory.

phpBB SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 1 of 7 in 2003. 13,499 views.

Release Date:
2003-12-30

Secunia Advisory ID:
SA10515

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass

Where:
From remote

Short Description:
Zarath has reported a vulnerability in phpBB, allowing malicious moderators to manipulate SQL queries. [Read More]

phpBB SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 2 of 7 in 2003. 13,123 views.

Release Date:
2003-11-28

Secunia Advisory ID:
SA10308

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data
Exposure of sensitive information

Where:
From remote

Short Description:
A vulnerability has been reported in phpBB, which can be exploited by malicious people to inject arbitrary SQL code. [Read More]

phpBB URL BBCode Tag Cross-Site Scripting Vulnerability
Vendor Patch. Secunia Advisory 3 of 7 in 2003. 13,451 views.

Release Date:
2003-09-10

Secunia Advisory ID:
SA9703

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
A vulnerability has been reported in phpBB, which can be exploited by malicious people to conduct Cross-Site Scripting attacks against other users. [Read More]

phpBB Cross Site Scripting Vulnerability
Vendor Workaround. Secunia Advisory 4 of 7 in 2003. 10,937 views.

Release Date:
2003-08-19

Secunia Advisory ID:
SA9567

Solution Status:
Vendor Workaround

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
A vulnerability has been identified in phpBB allowing malicious people to conduct Cross Site Scirpting attacks against users. [Read More]

phpBB "topic_id" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 5 of 7 in 2003. 14,166 views.

Release Date:
2003-06-23

Secunia Advisory ID:
SA9090

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of sensitive information

Where:
From remote

Short Description:
Rick Patel has reported a vulnerability in phpBB, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]

phpBB 'page_header.php' SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 6 of 7 in 2003. 11,158 views.

Release Date:
2003-02-25

Secunia Advisory ID:
SA8145

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of sensitive information

Where:
From remote

Short Description:
An input validation error has been identified in phpBB, which allows a malicious person to gain knowledge of sensitive information by conducting a SQL injection attack. [Read More]

phpBB SQL injection
Vendor Patch. Secunia Advisory 7 of 7 in 2003. 11,008 views.

Release Date:
2003-01-17

Secunia Advisory ID:
SA7887

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data

Where:
From remote

Short Description:
phpBB is vulnerable to SQL injection. The privmsg.php script does not verify input correctly, this allows users delete the body of other users messages, but not the title and meta data. [Read More]

Discuss this Product

A new thread in our forum is automatically created for each Product. Activate the thread by commenting/discussing below.

Subject: phpBB 2.x

No posts yet

Vulnerability Report: phpBB 2.x

Table of Contents

Vendor, Links, and Unpatched Vulnerabilities

7 Secunia Advisories in 2003

Discuss this Product

You must be logged in to post a comment.

Vulnerability Report: phpBB 2.x

Table of Contents

Vendor, Links, and Unpatched Vulnerabilities

7 Secunia Advisories in 2003

Discuss this Product

You must be logged in to post a comment.

Secunia Customer Login

Not a customer already?