Vulnerabilities (CVE)

Filtered by vendor Phpbb Group Subscribe
Filtered by product Phpbb
Total 82 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-1896 1 Phpbb Group 1 Phpbb 2025-04-03 6.0 MEDIUM N/A
Unspecified vulnerability in phpBB allows remote authenticated users with Administration Panel access to execute arbitrary PHP code via crafted Font Colour 3 ($theme[fontcolor3] variable) and/or signature values, possibly involving the highlight functionality. NOTE: the original report does not clarify whether this issue is static code injection, eval injection, or another type of vulnerability.
CVE-2006-2134 1 Phpbb Group 1 Phpbb 2025-04-03 5.1 MEDIUM N/A
PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.