Vulnerabilities

TI-2007-01497 CVE-2007-1555 · GHSA-7f39-67mx-jx7w

SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier…

LOW 35

SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the c parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01271 Published 2007-03-20 No fix listed

TI-2006-04893 CVE-2006-5077 · GHSA-967m-7h2v-9h9q

PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Chris…

LOW 30

PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Chris Smith Minerva Build 238 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path paramete…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.03647 Published 2006-09-29 No fix listed

TI-2006-02932 CVE-2006-3028 · GHSA-2mwr-hx8c-w25q

PHP remote file inclusion vulnerability in stat_modules/users_age/module.php in Minerva…

LOW 39

PHP remote file inclusion vulnerability in stat_modules/users_age/module.php in Minerva 2.0.8a Build 237 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03564 Published 2006-06-15 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier…

PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Chris…

PHP remote file inclusion vulnerability in stat_modules/users_age/module.php in Minerva…