Unscored DSA-1488-1 6 CVEs

phpbb2 - several vulnerabilities

Published Feb 9, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 3.1	phpbb2	2.0.13+1-6sarge4
Debian · 4.0	phpbb2	2.0.21-7

Vulnerabilities 6

Unscored —

CVE-2006-4758

phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users t…

Sep 13, 2006
Unscored —

CVE-2006-6508

Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.21 allows remote authenticated users to send unauthorized …

Dec 14, 2006
Unscored —

CVE-2006-6839

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for …

Jan 3, 2007
Unscored —

CVE-2006-6840

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative st…

Jan 3, 2007
Unscored —

CVE-2006-6841

Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors.

Jan 3, 2007
Unscored —

CVE-2008-0471

Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete privat…

Jan 29, 2008