Sploitus

93 exploited vulnerabilities in Phpbb

Showing 1–50 of 93, highest-scoring first

Vendors
Phpbb Limited, Phpbb, Invision Community, Phpbb Invision Power Board, Nivisec, Vitrax
With known exploits
93
Affected Phpbb Maluinfo versions
= 206.2.38
Affected Phpbb Group Phpbb versions
All versions
Affected Phpbb Supanav versions
= 1.0.0
Affected Phpbb versions
All versions
Affected Fully Modded Phpbb versions
All versions
Affected Chieminger Filebase Module versions
= 2.0
Affected Invision Power Services Invision Power Board versions
All versions
Affected Sebflipper Multi-forums Module versions
= 1.3.3

Vulnerabilities with exploits

Highest CVSS first — 42 of these already have exploit code on Sploitus

CVE-2006-7148 1 exploit
CVSS 10.0 HIGH 2007-03-07
maluinfo 206.2.38 - 'bb_usage_stats.php' Remote File Inclusion
CVE-2002-1537
CVSS 10.0 HIGH 2003-03-31FIX AVAILABLE
CVE-2007-3935 1 exploit
CVSS 9.3 HIGH 2007-07-21
phpBB Module SupaNav 1.0.0 - 'link_main.php' Remote File Inclusion
CVE-2025-70810
CVSS 8.8 HIGH 2026-04-09FIX AVAILABLE
CVE-2019-25685
CVSS 8.8 HIGH 2026-04-05FIX AVAILABLE
CVE-2026-29199
CVSS 8.1 HIGH 2026-05-04FIX AVAILABLE
CVE-2017-1000419
CVSS 7.5 HIGH 2018-01-02FIX AVAILABLE
CVE-2008-1350 1 exploit
CVSS 7.5 HIGH 2008-03-17FIX AVAILABLE
Fully Modded phpBB - 'kb.php' SQL Injection
CVE-2008-1305 1 exploit
CVSS 7.5 HIGH 2008-03-12
phpBB Mod FileBase 2.0 - 'id' SQL Injection
CVE-2007-5688 1 exploit
CVSS 7.5 HIGH 2007-10-29FIX AVAILABLE
Multi-Forums - 'Directory.php' Multiple SQL Injections
CVE-2007-4984 1 exploit
CVSS 7.5 HIGH 2007-09-19FIX AVAILABLE
phpBB Mod Ktauber.com StylesDemo - Blind SQL Injection
CVE-2007-4653 1 exploit
CVSS 7.5 HIGH 2007-09-04FIX AVAILABLE
phpBB Links MOD 1.2.2 - SQL Injection
CVE-2007-1961 1 exploit
CVSS 7.5 HIGH 2007-04-11FIX AVAILABLE
Mutant 0.9.2 - 'mutant_functions.php' Remote File Inclusion
CVE-2007-1818 1 exploit
CVSS 7.5 HIGH 2007-04-02FIX AVAILABLE
phpBB MOD Forum picture and META tags 1.7 - Remote File Inclusion
CVE-2007-1555 1 exploit
CVSS 7.5 HIGH 2007-03-20FIX AVAILABLE
phpBB Minerva Mod 2.0.21 build 238a - SQL Injection
CVE-2007-0762 1 exploit
CVSS 7.5 HIGH 2007-02-06FIX AVAILABLE
phpBB++ Build 100 - 'phpbb_root_path' Remote File Inclusion
CVE-2006-6216 1 exploit
CVSS 7.5 HIGH 2006-12-01FIX AVAILABLE
Hacks List phpBB Mod 1.21 - SQL Injection
CVE-2006-5665 1 exploit
CVSS 7.5 HIGH 2006-11-03FIX AVAILABLE
phpBB Spider Friendly Module 1.3.10 - Remote File Inclusion
CVE-2006-5526 1 exploit
CVSS 7.5 HIGH 2006-10-26
Fully Modded phpBB 2021.4.40 - Multiple File Inclusions
CVE-2006-5415 1 exploit
CVSS 7.5 HIGH 2006-10-20
phpBB News Defilante Horizontale 4.1.1 - Remote File Inclusion
CVE-2006-5387 1 exploit
CVSS 7.5 HIGH 2006-10-18
phpBB PlusXL 2.0_272 - 'constants.php' Remote File Inclusion
CVE-2006-5385 1 exploit
CVSS 7.5 HIGH 2006-10-18FIX AVAILABLE
phpBB SpamOborona Mod 1.0b - Remote File Inclusion
CVE-2006-5312 1 exploit
CVSS 7.5 HIGH 2006-10-17FIX AVAILABLE
phpBB Ajax Shoutbox 0.0.5 - Remote File Inclusion
CVE-2006-5309 1 exploit
CVSS 7.5 HIGH 2006-10-17FIX AVAILABLE
phpBB Prillian French Mod 0.8.0 - Remote File Inclusion
CVE-2006-5223 1 exploit
CVSS 7.5 HIGH 2006-10-10FIX AVAILABLE
phpBB User Viewed Posts Tracker 1.0 - Remote File Inclusion
CVE-2006-5222 1 exploit
CVSS 7.5 HIGH 2006-10-10
Dimension of phpBB 0.2.6 - 'phpbb_root_path' Remote File Inclusions
CVE-2006-5209 1 exploit
CVSS 7.5 HIGH 2006-10-09FIX AVAILABLE
phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion
CVE-2006-4779 1 exploit
CVSS 7.5 HIGH 2006-09-14
Vitrax Pre-modded 1.0.6-r3 - Remote File Inclusion
CVE-2006-4367 2 exploits
CVSS 7.5 HIGH 2006-08-26FIX AVAILABLE
phpBB alltopics.php SQLIphpBB All Topics Mod 1.5.0 - 'start' SQL Injection
CVE-2006-2361 1 exploit
CVSS 7.5 HIGH 2006-05-15
pafileDB 2.0.1 - 'mxBB'/'phpBB' Remote File Inclusion
CVE-2006-2360 1 exploit
CVSS 7.5 HIGH 2006-05-15
phpBB Chart Mod 1.1 - 'charts.php?id' SQL Injection
CVE-2006-2283
CVSS 7.5 HIGH 2006-05-09FIX AVAILABLE
CVE-2005-2086 11 exploits
CVSS 7.5 HIGH 2005-06-30FIX AVAILABLE
Phpbb RCEphpBB - 'viewtopic.php' Arbitrary Code Execution (Metasploit)
CVE-2005-1378 1 exploit
CVSS 7.5 HIGH 2005-05-02
phpBB Notes Module - SQL Injection
CVE-2005-1193 1 exploit
CVSS 7.5 HIGH 2005-05-16FIX AVAILABLE
phpBB 2.0.x - 'BBCode.php' URL Tag
CVE-2005-1170 1 exploit
CVSS 7.5 HIGH 2005-04-18
phpBB Remote - 'mod.php' SQL Injection
CVE-2005-1026 2 exploits
CVSS 7.5 HIGH 2005-04-09FIX AVAILABLE
phpBB 2.0.13 DLMan Pro Module - SQL InjectionphpBB 2.0.13 Linkz Pro Module - SQL Injection
CVE-2005-0614 3 exploits
CVSS 7.5 HIGH 2005-03-03FIX AVAILABLE
phpBB 2.0.12 - Change User Rights Authentication BypassphpBB 2.0.12 - Change User Rights Authentication Bypass
CVE-2004-2350 1 exploit
CVSS 7.5 HIGH 2004-12-31FIX AVAILABLE
phpBB 1.x/2.0.x - 'search.php?search_results' SQL Injection
CVE-2004-1943 1 exploit
CVSS 7.5 HIGH 2004-04-19FIX AVAILABLE
phpBB 2.0.x - 'album_portal.php' Remote File Inclusion
CVE-2004-1535 1 exploit
CVSS 7.5 HIGH 2004-12-31FIX AVAILABLE
phpBB 2.0.x - 'admin_cash.php' PHP Remote File Inclusion
CVE-2004-1315 14 exploits
CVSS 7.5 HIGH 2004-11-12FIX AVAILABLE
Exploit for CVE-1999-0078PHP-Nuke 7.0/8.1/8.1.35 - Wormable Remote Code Execution
CVE-2003-1530 1 exploit
CVSS 7.5 HIGH 2003-12-31FIX AVAILABLE
phpBB 2.0.3 - 'privmsg.php' SQL Injection
CVE-2003-1244 1 exploit
CVSS 7.5 HIGH 2003-12-31FIX AVAILABLE
PHPBB2 - 'Page_Header.php' SQL Injection
CVE-2003-1216 1 exploit
CVSS 7.5 HIGH 2003-11-27FIX AVAILABLE
phpBB 2.0.6 - 'search_id' SQL Injection / MD5 Hash
CVE-2002-2287 1 exploit
CVSS 7.5 HIGH 2002-12-31FIX AVAILABLE
phpBB Advanced Quick Reply Hack 1.0/1.1 - Remote File Inclusion
CVE-2002-0902 1 exploit
CVSS 7.5 HIGH 2002-08-31FIX AVAILABLE
PHPBB2 - Image Tag HTML Injection
CVE-2018-19274
CVSS 7.2 HIGH 2018-11-17FIX AVAILABLE
CVE-2006-2693
CVSS 7.1 HIGH 2006-05-31FIX AVAILABLE
CVE-2007-5173 1 exploit
CVSS 6.8 MEDIUM 2007-10-03FIX AVAILABLE
phpBB Mod OpenID 0.2.0 - 'BBStore.php' Remote File Inclusion