Vulnerabilities (CVE)

Filtered by vendor Phpbb Group Subscribe
Filtered by product Phpbb
Total 82 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-0259 1 Phpbb Group 1 Phpbb 2025-04-03 6.4 MEDIUM N/A
phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field to reference the target file.
CVE-2005-0659 1 Phpbb Group 1 Phpbb 2025-04-03 5.0 MEDIUM N/A
phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message.