Secunia Logo  


Secunia PSI WorldMap
 
Vulnerability Report: phpBB 2.x
This vulnerability report for phpBB 2.x contains a complete overview of all Secunia advisories affecting it. You can use this vulnerability report to ensure that you are aware of all vulnerabilities, both patched and unpatched, affecting this product allowing you to take the necessary precautions.

If you have information about a new or an existing vulnerability in phpBB 2.x then you are more than welcome to contact us.


Table of Contents

1. Product Summary Only

2. Secunia Advisory Statistics (All time)
2.1. Statistics for 2009
2.2. Statistics for 2008
2.3. Statistics for 2007
2.4. Statistics for 2006
2.5. Statistics for 2005
2.6. Statistics for 2004
2.7. Statistics for 2003

3. List of Secunia Advisories (All time)
3.1. List for 2009
3.2. List for 2008
3.3. List for 2007
3.4. List for 2006
3.5. List for 2005
3.6. List for 2004
3.7. List for 2003

4. Send Feedback
 
Vendor, Links, and Unpatched Vulnerabilities

Vendor N/A

Product Link View Here (Link to external site)

Affected By 38 Secunia advisories
27 Vulnerabilities

Monitor Product Receive alerts for this product

Unpatched 0% (0 of 38 Secunia advisories)

Most Critical Unpatched
There are no unpatched Secunia advisories affecting this product, when all vendor patches are applied..




7 Secunia Advisories in 2003
Secunia has issued a total of 7 Secunia advisories in 2003 for phpBB 2.x. Currently, 0% (0 out of 7) are marked as unpatched.

More information about the specific Secunia advisories affecting phpBB 2.x can be found below. Each Secunia advisory is enclosed by a box highlighted with a color representing its current patch status. You can read the complete Secunia advisories for thorough descriptions of the issues covered and for solution suggestions by clicking either the Secunia advisory title or the "Read More" links available for each Secunia advisory.



phpBB SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 1 of 7 in 2003. 11,672 views.
Release Date:
2003-12-30
Secunia Advisory ID:
SA10515
Solution Status:
Vendor Patch
Criticality:
Impact:
Security Bypass
Where:
From remote
Short Description:
Zarath has reported a vulnerability in phpBB, allowing malicious moderators to manipulate SQL queries. [Read More]


phpBB SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 2 of 7 in 2003. 11,192 views.
Release Date:
2003-11-28
Secunia Advisory ID:
SA10308
Solution Status:
Vendor Patch
Criticality:
Impact:
Manipulation of data
Exposure of sensitive information
Where:
From remote
Short Description:
A vulnerability has been reported in phpBB, which can be exploited by malicious people to inject arbitrary SQL code. [Read More]


phpBB URL BBCode Tag Cross-Site Scripting Vulnerability
Vendor Patch. Secunia Advisory 3 of 7 in 2003. 11,947 views.
Release Date:
2003-09-10
Secunia Advisory ID:
SA9703
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
A vulnerability has been reported in phpBB, which can be exploited by malicious people to conduct Cross-Site Scripting attacks against other users. [Read More]


phpBB Cross Site Scripting Vulnerability
Vendor Workaround. Secunia Advisory 4 of 7 in 2003. 9,708 views.
Release Date:
2003-08-19
Secunia Advisory ID:
SA9567
Solution Status:
Vendor Workaround
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
A vulnerability has been identified in phpBB allowing malicious people to conduct Cross Site Scirpting attacks against users. [Read More]


phpBB "topic_id" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 5 of 7 in 2003. 12,497 views.
Release Date:
2003-06-23
Secunia Advisory ID:
SA9090
Solution Status:
Vendor Patch
Criticality:
Impact:
Exposure of sensitive information
Where:
From remote
Short Description:
Rick Patel has reported a vulnerability in phpBB, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]


phpBB 'page_header.php' SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 6 of 7 in 2003. 9,215 views.
Release Date:
2003-02-25
Secunia Advisory ID:
SA8145
Solution Status:
Vendor Patch
Criticality:
Impact:
Exposure of sensitive information
Where:
From remote
Short Description:
An input validation error has been identified in phpBB, which allows a malicious person to gain knowledge of sensitive information by conducting a SQL injection attack. [Read More]


phpBB SQL injection
Vendor Patch. Secunia Advisory 7 of 7 in 2003. 8,959 views.
Release Date:
2003-01-17
Secunia Advisory ID:
SA7887
Solution Status:
Vendor Patch
Criticality:
Impact:
Manipulation of data
Where:
From remote
Short Description:
phpBB is vulnerable to SQL injection. The privmsg.php script does not verify input correctly, this allows users delete the body of other users messages, but not the title and meta data. [Read More]