Vulnerabilities

TI-2008-01355 CVE-2008-1408 · GHSA-9x7q-q6mg-vvp5

SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3…

LOW 35

SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 (2.204) FIX 4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a banner_out action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01235 Published 2008-03-20 No fix listed CWE-89

TI-2007-00360 CVE-2007-0370 · GHSA-v9qg-p6jf-339r

Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier…

LOW 35

Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to inject arbitrary PHP code into an upload/banners/ file via a banners add operation that uploads the PHP…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2007-01-19 No fix listed

TI-2007-00359 CVE-2007-0369 · GHSA-r4ch-c96g-v4pg

SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to…

LOW 35

SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to execute arbitrary SQL commands via the comment forum.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01123 Published 2007-01-19 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3…

Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier…

SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to…