Login Request a demo
PH
Vendor
phpBB
26 products with CVEs on record
69
CVEs
0
On KEV
1
New 30D
Products
PH
phpBB
phpBB
9.8
44 CVEs0 on KEV1 new
1F
123 Flash Chat Module
Phpbb
–
1 CVEs0 on KEV0 new
AU
Acp User Registration Module
Phpbb
–
1 CVEs0 on KEV0 new
AQ
Advanced Quick Reply Hack
Phpbb
–
1 CVEs0 on KEV0 new
AS
Ajax Shoutbox
Phpbb
–
1 CVEs0 on KEV0 new
AM
Amazonia Mod
Phpbb
–
1 CVEs0 on KEV0 new
DI
Dimension
Phpbb
–
1 CVEs0 on KEV0 new
EC
Ezboard Converter
Phpbb
–
1 CVEs0 on KEV0 new
GA
Garage
Phpbb
–
1 CVEs0 on KEV0 new
IT
Import Tools
Phpbb
–
1 CVEs0 on KEV0 new
IU
Insert User
Phpbb
–
1 CVEs0 on KEV0 new
IP
Ip-tracking
Phpbb
–
1 CVEs0 on KEV0 new
JS
Journals System Module
Phpbb
–
1 CVEs0 on KEV0 new
LA
Lat2cyr
Phpbb
–
1 CVEs0 on KEV0 new
MA
Maluinfo
Phpbb
–
1 CVEs0 on KEV0 new
MX
Module XS
Phpbb
–
1 CVEs0 on KEV0 new
MU
Mutant
Phpbb
–
1 CVEs0 on KEV0 new
PP
Phpbb Plus
Phpbb
–
1 CVEs0 on KEV0 new
PH
Phpbbmod
Phpbb
–
1 CVEs0 on KEV0 new
PM
Pjirc Module
Phpbb
–
1 CVEs0 on KEV0 new
PF
Prillian French
Phpbb
–
1 CVEs0 on KEV0 new
SE
Searchindexer
Phpbb
–
1 CVEs0 on KEV0 new
SP
Spamblockermod
Phpbb
–
1 CVEs0 on KEV0 new
SU
Supanav
Phpbb
–
1 CVEs0 on KEV0 new
TB
Tag Board
Phpbb
–
1 CVEs0 on KEV0 new
TO
Toplist
Phpbb
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-87901
New
PH
phpBB
phpBB
8.3
0%
Oct 23Improper sanitization in the registration module allows reflected Cross-Site Scripting
CVE-2026-48613
PH
phpBB
phpBB
5.9
0%
Jun 12SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL…
CVE-2026-48612
PH
phpBB
phpBB
8.0
0%
Jun 12Improper state verification in the OAuth implementation could allow an attacker to manipulate the authentication flow and cause a victim’s account to be linked to an…
CVE-2026-47366
PH
phpBB
phpBB
7.2
0%
Jun 12Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated administrator to grant permissions…
CVE-2026-48611
PH
phpBB
phpBB
9.8
4%
Jun 12Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default…
CVE-2026-29199
PH
phpBB
phpBB
8.1
0%
May 4phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning
CVE-2025-70811
PH
Phpbb
Phpbb
4.3
0%
Apr 9Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the Admin Control Panel icon management functionality
CVE-2025-70810
PH
Phpbb
Phpbb
8.8
0%
Apr 9Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the login function and the authentication mechanism
CVE-2023-5917
PH
Phpbb
Phpbb
6.1
1%
Nov 2A vulnerability, which was classified as problematic, has been found in phpBB up to 3.3.10
CVE-2020-8226
PH
Phpbb
Phpbb
5.8
1%
Aug 17A vulnerability exists in phpBB <v3.2.10 and <v3.3.1 which allowed remote image dimensions check to be used to SSRF
CVE-2019-16108
PH
Phpbb
Phpbb
7.5
1%
Mar 20phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets (CSS) token sequence to a page through BBCode
CVE-2019-16107
PH
Phpbb
Phpbb
4.3
0%
Mar 11Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments
CVE-2020-5502
PH
Phpbb
Phpbb
6.5
0%
Jan 15phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships
CVE-2020-5501
PH
Phpbb
Phpbb
4.3
0%
Jan 15phpBB 3.2.8 allows a CSRF attack that can modify a group avatar
CVE-2011-0544
PH
Phpbb
Phpbb
6.1
1%
Nov 14phpbb 3.0.x-3.0.6 has an XSS vulnerability via the [flash] BB tag
CVE-2019-16993
PH
Phpbb
Phpbb
8.8
1%
Sep 30In phpBB before 3.1.7-PL1, includes/acp/acp_bbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel
CVE-2019-13376
PH
Phpbb
Phpbb
6.5
1%
Sep 27phpBB version 3.2.7 allows the stealing of an Administration Control Panel session id by leveraging CSRF in the Remote Avatar feature
CVE-2019-11767
PH
Phpbb
Phpbb
5.8
1%
May 5Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload…
CVE-2019-9826
PH
Phpbb
Phpbb
7.5
2%
May 2The fulltext search component in phpBB before 3.2.6 allows Denial of Service
CVE-2018-19274
PH
Phpbb
Phpbb
7.2
5%
Nov 17Passing an absolute path to a file_exists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization when an attacker has…
CVE-2017-1000419
PH
Phpbb
Phpbb
7.5
1%
Jan 2phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar function resulting allowing an attacker to perform port scanning, requesting internal content and potentially…
CVE-2015-3880
PH
Phpbb
Phpbb
6.1
2%
Sep 19Open redirect vulnerability in phpBB before 3.0.14 and 3.1.x before 3.1.4 allows remote attackers to redirect users of Google Chrome to arbitrary web sites and conduct phishing…
CVE-2015-1432
PH
Phpbb
Phpbb
–
1%
Feb 10The message_options function in includes/ucp/ucp_pm_options.php in phpBB before 3.0.13 does not properly validate the form key, which allows remote attackers to conduct CSRF…
CVE-2015-1431
PH
Phpbb
Phpbb
–
3%
Feb 10Cross-site scripting (XSS) vulnerability in includes/startup.php in phpBB before 3.0.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to…
CVE-2010-1630
PH
Phpbb
Phpbb
–
1%
May 19Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in circumstances related to a "global…
CVE-2010-1627
PH
Phpbb
Phpbb
–
1%
May 19feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows remote attackers to bypass intended access restrictions via unspecified attack…
CVE-2008-7143
PH
Phpbb
Phpbb
–
1%
Sep 1phpBB 2.0.23 includes the session ID in a request to modcp.php when the moderator or administrator closes a thread, which allows remote attackers to hijack the session via a post…
CVE-2008-6507
PH
Phpbb
Phpbb
–
1%
Mar 23Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message…
CVE-2008-6506
PH
Phpbb
Phpbb
–
1%
Mar 23Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de-activated accounts via unknown vectors
CVE-2008-6314
TB
Tag Board
Phpbb
–
1%
Feb 27SQL injection vulnerability in tag_board.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a…
CVE-2008-4125
PH
Phpbb
Phpbb
–
2%
Sep 18The search function in phpBB 2.x provides a search_id value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as…
CVE-2008-3224
PH
Phpbb
Phpbb
–
1%
Jul 18Unspecified vulnerability in phpBB before 3.0.1 has unknown impact and attack vectors related to "urls gone through redirect() being used within login_box()."
CVE-2008-1766
PH
Phpbb
Phpbb
–
1%
Apr 12Multiple unspecified vulnerabilities in phpBB before 3.0.1 have unknown impact and attack vectors, related to "two minor security-related bugs."
CVE-2008-1565
PM
Pjirc Module
Phpbb
–
2%
Mar 31Directory traversal vulnerability in forum/irc/irc.php in the PJIRC 0.5 module for phpBB allows remote attackers to include and execute arbitrary local files via a
CVE-2008-1512
MX
Module XS
Phpbb
–
2%
Mar 25Directory traversal vulnerability in admin/admin_xs.php in eXtreme Styles module (XS-Mod) 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and execute arbitrary files…
CVE-2008-1171
1F
123 Flash Chat Module
Phpbb
–
1%
Mar 5Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path…
CVE-2008-0471
PH
Phpbb
Phpbb
–
1%
Jan 29Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages (PM) as arbitrary users via a deleteall action
CVE-2007-6223
GA
Garage
Phpbb
–
1%
Dec 4SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL commands via the make_id parameter in a search action in…
CVE-2007-5688
PH
Phpbb
Phpbb
–
1%
Oct 29Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Board (IPB or IP.Board), allow…
CVE-2007-5173
PH
Phpbb
Phpbb
–
3%
Oct 3PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2007-5100
PP
Phpbb Plus
Phpbb
–
2%
Sep 26Multiple PHP remote file inclusion vulnerabilities in phpBB Plus 1.53, and 1.53a before 20070922, when register_globals is enabled, allow remote attackers to execute arbitrary PHP…
CVE-2007-4653
PH
Phpbb
Phpbb
–
1%
Sep 4SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote attackers to execute arbitrary SQL commands via the start…
CVE-2007-3935
SU
Supanav
Phpbb
–
4%
Jul 21PHP remote file inclusion vulnerability in link_main.php in the SupaNav 1.0.0 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2007-2858
IP
Ip-tracking
Phpbb
–
1%
May 24SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via…
CVE-2007-1961
MU
Mutant
Phpbb
–
2%
Apr 11PHP remote file inclusion vulnerability in mutant_functions.php in the Mutant 0.9.2 portal for phpBB 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2006-7174
DI
Dimension
Phpbb
–
2%
Mar 21PHP remote file inclusion vulnerability in includes/functions.php in the Dimension module of phpBB allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2006-7168
PH
Phpbb
Phpbb
–
7%
Mar 20PHP remote file inclusion vulnerability in includes/not_mem.php in the Add Name module for PHP allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2006-7148
MA
Maluinfo
Phpbb
–
3%
Mar 7PHP remote file inclusion vulnerability in includes/bb_usage_stats.php in maluinfo 206.2.38 for Brazilian PHPBB allows remote attackers to execute arbitrary PHP code via the…
CVE-2006-7147
IT
Import Tools
Phpbb
–
4%
Mar 7PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a…
CVE-2006-7100
IU
Insert User
Phpbb
–
2%
Mar 3PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Insert User 0.1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL…
CVE-2006-2220
PH
Phpbb
Phpbb
–
1%
Feb 8phpBB 2.0.20 does not properly verify user-specified input variables used as limits to SQL queries, which allows remote attackers to obtain sensitive information via a negative…
CVE-2007-0762
PH
Phpbb++
Phpbb++
–
3%
Feb 6PHP remote file inclusion vulnerability in includes/functions.php in phpBB++ Build 100 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path…
CVE-2007-0761
EC
Ezboard Converter
Phpbb
–
3%
Feb 6PHP remote file inclusion vulnerability in config.php in phpBB ezBoard converter (ezconvert) 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2006-6593
AM
Amazonia Mod
Phpbb
–
2%
Dec 15PHP remote file inclusion vulnerability in zufallscodepart.php in AMAZONIA MOD for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path…
CVE-2006-6459
TO
Toplist
Phpbb
–
1%
Dec 11Cross-site scripting (XSS) vulnerability in toplist.php in PhpBB Toplist 1.3.7 allows remote attackers to inject arbitrary HTML or web script via the (1) Name and (2) Information…
CVE-2006-5418
SE
Searchindexer
Phpbb
–
6%
Oct 20PHP remote file inclusion vulnerability in archive/archive_topic.php in pbpbb archive for search engines (SearchIndexer) (aka phpBBSEI) for phpBB allows remote attackers to…
CVE-2006-5390
AU
Acp User Registration Module
Phpbb
–
3%
Oct 18PHP remote file inclusion vulnerability in includes/functions_mod_user.php in the ACP User Registration (MMW) 1.00 module for phpBB allows remote attackers to execute arbitrary…
CVE-2006-5312
AS
Ajax Shoutbox
Phpbb
–
2%
Oct 17PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in…
CVE-2006-5309
PF
Prillian French
Phpbb
–
3%
Oct 17PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute…
CVE-2006-5305
LA
Lat2cyr
Phpbb
–
3%
Oct 17PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the…