All products

phpbb/phpbb

Composer · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
phpBB has Password Reset Link Poisoning via Host Header injectionCVE-2026-29199 · GHSA-7GM6-W7MX-58CR phpbb/phpbb Composer High Fix reported
phpBB vulnerability related to use of "forum id" in circumstances related to a "global announcement."CVE-2010-1630 · GHSA-5CVH-XQHR-5G87 phpbb/phpbb Composer High Fix reported
phpBB 3.0.7 allows remote attackers to bypass intended access restrictionsCVE-2010-1627 · GHSA-8H9C-RCWJ-JG8P phpbb/phpbb Composer High Fix reported
phpBB vulnerable to sensitive information disclosureCVE-2008-6507 · GHSA-JW8F-Q84G-R3VM phpbb/phpbb Composer High Fix reported
phpBB's Smiley Pack acp_icons.php main pack vulnerable to cross site scriptingCVE-2023-5917 · GHSA-GMX8-8RFF-QV6Q phpbb/phpbb Composer Medium Fix reported
phpBB Server-Side Request Forgery (SSRF)CVE-2017-1000419 · GHSA-9JM4-RG99-566C phpbb/phpbb Composer High Fix reported
phpBB Denial of ServiceCVE-2019-9826 · GHSA-6PGR-X867-H7JX phpbb/phpbb Composer High Fix reported
phpBB Remote Code ExecutionCVE-2018-19274 · GHSA-H3MR-Q96R-37V4 phpbb/phpbb Composer High Fix reported
phpBB Server side request forgery (SSRF)CVE-2019-11767 · GHSA-4HX9-P925-QCV7 phpbb/phpbb Composer Medium Fix reported
phpBB Cross-Site Request Forgery (CSRF)CVE-2019-13376 · GHSA-6MH2-98GR-WV76 phpbb/phpbb Composer Medium Fix reported
phpBB arbitrary CSS injectionCVE-2019-16108 · GHSA-8HC2-HVRC-X4QR phpbb/phpbb Composer High Fix reported
phpBB Cross-Site Request Forgery (CSRF)CVE-2019-16993 · GHSA-VJ3X-VFM4-HVXC phpbb/phpbb Composer High Fix reported
phpBB Cross-Site Request Forgery (CSRF)CVE-2019-16107 · GHSA-WG24-9XM9-593V phpbb/phpbb Composer Medium Fix reported
phpBB Cross-Site Request Forgery (CSRF)CVE-2020-5501 · GHSA-CPQC-G4R8-6HXG phpbb/phpbb Composer Medium Fix reported
phpBB Open RedirectCVE-2015-3880 · GHSA-HWQ7-CVP8-6HM3 phpbb/phpbb Composer Medium Fix reported
phpBB allows CSRFCVE-2020-5502 · GHSA-69Q7-HWW4-8PJQ phpbb/phpbb Composer Medium Fix reported
phpBB Server-Side Request Forgery VulnerabilityCVE-2020-8226 · GHSA-JHM9-H84H-RW83Version ranges need review. phpbb/phpbb Composer Medium Fix reported