Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
phpbb/phpbb
Composer
· Package
17 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
phpBB has Password Reset Link Poisoning via Host Header injection
CVE-2026-29199 · GHSA-7GM6-W7MX-58CR
phpbb/phpbb
Composer
High
Fix reported
2026-09-10
phpBB vulnerability related to use of "forum id" in circumstances related to a "global announcement."
CVE-2010-1630 · GHSA-5CVH-XQHR-5G87
phpbb/phpbb
Composer
High
Fix reported
2024-10-30
phpBB 3.0.7 allows remote attackers to bypass intended access restrictions
CVE-2010-1627 · GHSA-8H9C-RCWJ-JG8P
phpbb/phpbb
Composer
High
Fix reported
2024-10-30
phpBB vulnerable to sensitive information disclosure
CVE-2008-6507 · GHSA-JW8F-Q84G-R3VM
phpbb/phpbb
Composer
High
Fix reported
2024-10-30
phpBB's Smiley Pack acp_icons.php main pack vulnerable to cross site scripting
CVE-2023-5917 · GHSA-GMX8-8RFF-QV6Q
phpbb/phpbb
Composer
Medium
Fix reported
2024-10-30
phpBB Server-Side Request Forgery (SSRF)
CVE-2017-1000419 · GHSA-9JM4-RG99-566C
phpbb/phpbb
Composer
High
Fix reported
2024-04-24
phpBB Denial of Service
CVE-2019-9826 · GHSA-6PGR-X867-H7JX
phpbb/phpbb
Composer
High
Fix reported
2024-04-24
phpBB Remote Code Execution
CVE-2018-19274 · GHSA-H3MR-Q96R-37V4
phpbb/phpbb
Composer
High
Fix reported
2024-04-24
phpBB Server side request forgery (SSRF)
CVE-2019-11767 · GHSA-4HX9-P925-QCV7
phpbb/phpbb
Composer
Medium
Fix reported
2024-04-24
phpBB Cross-Site Request Forgery (CSRF)
CVE-2019-13376 · GHSA-6MH2-98GR-WV76
phpbb/phpbb
Composer
Medium
Fix reported
2024-04-24
phpBB arbitrary CSS injection
CVE-2019-16108 · GHSA-8HC2-HVRC-X4QR
phpbb/phpbb
Composer
High
Fix reported
2024-04-24
phpBB Cross-Site Request Forgery (CSRF)
CVE-2019-16993 · GHSA-VJ3X-VFM4-HVXC
phpbb/phpbb
Composer
High
Fix reported
2024-04-24
phpBB Cross-Site Request Forgery (CSRF)
CVE-2019-16107 · GHSA-WG24-9XM9-593V
phpbb/phpbb
Composer
Medium
Fix reported
2024-04-24
phpBB Cross-Site Request Forgery (CSRF)
CVE-2020-5501 · GHSA-CPQC-G4R8-6HXG
phpbb/phpbb
Composer
Medium
Fix reported
2024-04-24
phpBB Open Redirect
CVE-2015-3880 · GHSA-HWQ7-CVP8-6HM3
phpbb/phpbb
Composer
Medium
Fix reported
2024-02-16
phpBB allows CSRF
CVE-2020-5502 · GHSA-69Q7-HWW4-8PJQ
phpbb/phpbb
Composer
Medium
Fix reported
2023-07-13
phpBB Server-Side Request Forgery Vulnerability
CVE-2020-8226 · GHSA-JHM9-H84H-RW83
Version ranges need review.
phpbb/phpbb
Composer
Medium
Fix reported
2023-04-24