Filtered by vendor Phpgb Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2002-1482 1 Phpgb 1 Phpgb 2024-08-08 N/A
SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry.
CVE-2002-1481 1 Phpgb 1 Phpgb 2024-08-08 N/A
savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a denial of service or execute arbitrary PHP code by using savesettings.php to modify config.php.
CVE-2002-1480 1 Phpgb 1 Phpgb 2024-08-08 N/A
Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook pages, which is executed when the administrator deletes the entry.