Phpbb : Security Vulnerabilities, CVEs, Published In October 2007
Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Board (IPB or IP.Board), allow remote attackers to execute arbitrary SQL commands via the (1) go and (2) cat parameters.
Max CVSS
7.5
EPSS Score
0.09%
Published
2007-10-29
Updated
2018-10-15
PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the openid_root_path parameter.
Max CVSS
6.8
EPSS Score
8.97%
Published
2007-10-03
Updated
2018-10-15
2 vulnerabilities found