Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how phpbb compares to other vendors in security performance

View Risk Score →

phpBB phpbbSQL Injection

Risk 50
Severity
7.1
First published (updated )
CVE-2026-48613

phpBB phpbbphpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poiso…

Risk 59
Severity
8.1
First published (updated )
CVE-2026-29199

phpBB phpbbCSRF

Risk 77
Severity
8.8
First published (updated )
CVE-2025-70810

phpBB phpBB 3CSRF

Risk 22
Severity
4.3
First published (updated )
CVE-2025-70811

phpBB phpbbphpBB Arbitrary File Upload via Phar Deserialization

Risk 41
Severity
8.7
First published (updated )
CVE-2019-25685
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/phpbb/phpbbphpBB Smiley Pack acp_icons.php main cross site scripting

Risk 28
Severity
6.1
EPSS
0.10%
First published (updated )
CVE-2023-5917

phpbb phpbbSSRF

Risk 30
Severity
5.8
First published (updated )
CVE-2020-8226

composer/phpbb/phpbbCode Injection

Risk 45
Severity
7.5
First published (updated )
CVE-2019-16108

composer/phpbb/phpbbCSRF

Risk 23
Severity
4.3
First published (updated )
CVE-2019-16107

phpBB phpbbCSRF

Risk 37
Severity
6.5
First published (updated )
CVE-2020-5502
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/phpbb/phpbbCSRF

Risk 23
Severity
4.3
First published (updated )
CVE-2020-5501

debian/phpbb3XSS

Risk 38
Severity
6.1
First published (updated )
CVE-2011-0544

composer/phpbb/phpbbCSRF

Risk 80
Severity
8.8
First published (updated )
CVE-2019-16993

composer/phpbb/phpbbCSRF, XSS

Risk 39
Severity
6.5
First published (updated )
CVE-2019-13376

composer/phpbb/phpbbSSRF

Risk 31
Severity
5.8
First published (updated )
CVE-2019-11767
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/phpbb/phpbbInput Validation

Risk 45
Severity
7.5
First published (updated )
CVE-2019-9826

composer/phpbb/phpbbPassing an absolute path to a file_exists check in phpBB before 3.2.4 allows Remote Code Execution t…

Risk 68
Severity
7.2
First published (updated )
CVE-2018-19274

composer/phpbb/phpbbSSRF

Risk 45
Severity
7.5
First published (updated )
CVE-2017-1000419

phpBB phpbbOpen redirect vulnerability in phpBB before 3.0.14 and 3.1.x before 3.1.4 allows remote attackers to…

Risk 38
Severity
6.1
First published (updated )
CVE-2015-3880

phpBB phpbbCSRF

Risk 47
Severity
6.8
First published (updated )
CVE-2015-1432
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

phpBB phpbbXSS

Risk 22
Severity
4.3
First published (updated )
CVE-2015-1431

phpBB phpbbUnspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors…

Risk 89
Severity
9.8
First published (updated )
CVE-2010-1630

composer/phpbb/phpbbfeed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows…

Risk 54
Severity
6.8
First published (updated )
CVE-2010-1627

Absoluteanime Prime Quick StyleSQL Injection

Risk 46
Severity
6.5
First published (updated )
CVE-2009-3052

phpBB phpbbInfoleak

Risk 47
Severity
6.8
First published (updated )
CVE-2008-7143
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

phpbb phpbbInfoleak

Risk 45
Severity
7.5
First published (updated )
CVE-2008-6507

phpBB phpbbUnspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restricti…

Risk 26
Severity
5
First published (updated )
CVE-2008-6506

phpBB Tag BoardSQL Injection

Risk 52
Severity
7.5
First published (updated )
CVE-2008-6314

Prezmo Small ShoutboxSQL Injection

Risk 52
Severity
7.5
First published (updated )
CVE-2008-6301

phpBB phpbbInfoleak

Risk 26
Severity
5
First published (updated )
CVE-2008-4125
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203