phpbb2 - several

Fixed packages 1

Vulnerabilities 9

• Unscored —
  CVE-2005-3310

  Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows remote authenticated …

  Oct 25, 2005
• Unscored —
  CVE-2005-3415

  phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by se…

  Nov 1, 2005
• Unscored —
  CVE-2005-3416

  phpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not been called to handle…

  Nov 1, 2005
• Unscored —
  CVE-2005-3417

  phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global…

  Nov 1, 2005
• Unscored —
  CVE-2005-3418

  Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.17 and earlier allow remote attackers to inject arbitr…

  Nov 1, 2005
• Unscored —
  CVE-2005-3419

  SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL com…

  Nov 1, 2005
• Unscored —
  CVE-2005-3420

  usercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and execute PHP code via the …

  Nov 1, 2005
• Unscored —
  CVE-2005-3536

  SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the …

  Dec 22, 2005
• Unscored —
  CVE-2005-3537

  A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other…

  Dec 22, 2005