Vulnerabilities

TI-2007-04989 CVE-2007-5178 · GHSA-hx4x-qj2r-6g94

contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical…

LOW 36

contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0301 Published 2007-10-03 No fix listed CWE-94

TI-2007-02409 CVE-2007-2493 · GHSA-5p82-w985-h72p

PHP remote file inclusion vulnerability in faq.php in the FAQ & RULES 2.0.0 and earlier…

MEDIUM 50

PHP remote file inclusion vulnerability in faq.php in the FAQ & RULES 2.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04034 Published 2007-05-04 No fix listed

TI-2007-02231 CVE-2007-2313 · GHSA-j6q2-cg9j-qxq4

PHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module…

MEDIUM 42

PHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06076 Published 2007-04-26 No fix listed

TI-2006-06394 CVE-2006-6650 · GHSA-5fqj-3958-qj69

PHP remote file inclusion vulnerability in charts_constants.php in the Charts (mx_charts)…

LOW 35

PHP remote file inclusion vulnerability in charts_constants.php in the Charts (mx_charts) 1.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path paramete…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02354 Published 2006-12-20 No fix listed

TI-2006-06389 CVE-2006-6645 · GHSA-hwrc-rg6v-482f

PHP remote file inclusion vulnerability in language/lang_english/lang_admin.php in the…

LOW 37

PHP remote file inclusion vulnerability in language/lang_english/lang_admin.php in the Web Links (mx_links) 2.05 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02425 Published 2006-12-20 No fix listed

TI-2006-06388 CVE-2006-6644 · GHSA-q7hw-3cqj-84g6

PHP remote file inclusion vulnerability in pages/meeting_constants.php in the Meeting…

LOW 35

PHP remote file inclusion vulnerability in pages/meeting_constants.php in the Meeting (mx_meeting) 1.1.2 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02354 Published 2006-12-20 No fix listed

TI-2006-06359 CVE-2006-6615 · GHSA-qmhj-ph24-pcx2

PHP remote file inclusion vulnerability in includes/act_constants.php in the Activity…

LOW 38

PHP remote file inclusion vulnerability in includes/act_constants.php in the Activity Games (mx_act) 0.92 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02594 Published 2006-12-18 No fix listed

TI-2006-06312 CVE-2006-6568 · GHSA-694r-j4hj-mmq8

Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base…

MEDIUM 50

Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attackers to include arbitrary files via a ..

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04035 Published 2006-12-15 No fix listed

TI-2006-06311 CVE-2006-6567 · GHSA-4c4p-mw68-gjfv

PHP remote file inclusion vulnerability in includes/kb_constants.php in the Knowledge…

MEDIUM 50

PHP remote file inclusion vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04336 Published 2006-12-15 No fix listed

TI-2006-06310 CVE-2006-6566 · GHSA-2454-558w-967q

PHP remote file inclusion vulnerability in includes/profilcp_constants.php in the Profile…

LOW 39

PHP remote file inclusion vulnerability in includes/profilcp_constants.php in the Profile Control Panel (CPanel) module for mxBB 0.91c allows remote attackers to execute arbitrary PHP code via a URL in the module_root_pa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03301 Published 2006-12-15 No fix listed

TI-2006-06305 CVE-2006-6560 · GHSA-69v5-q2fc-8mpp

PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0…

LOW 38

PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) Portal allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path paramet…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02594 Published 2006-12-14 No fix listed

TI-2006-06298 CVE-2006-6553 · GHSA-2m9p-437w-qjx7

PHP remote file inclusion vulnerability in includes/newssuite_constants.php in the…

LOW 38

PHP remote file inclusion vulnerability in includes/newssuite_constants.php in the NewsSuite 1.03 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02871 Published 2006-12-14 No fix listed

TI-2006-06059 CVE-2006-6295 · GHSA-wp4m-5j4c-57gf

PHP remote file inclusion vulnerability in includes/mx_common.php in the mx_tinies 1.3.0…

MEDIUM 40

PHP remote file inclusion vulnerability in includes/mx_common.php in the mx_tinies 1.3.0 Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.06587 Published 2006-12-05 No fix listed

TI-2006-05833 CVE-2006-6065 · GHSA-qg3w-jw44-x445

PHP remote file inclusion vulnerability in includes/mx_common.php in the CalSnails Module…

LOW 29

PHP remote file inclusion vulnerability in includes/mx_common.php in the CalSnails Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.03087 Published 2006-11-22 No fix listed

TI-2006-05587 CVE-2006-5803 · GHSA-999q-9mwq-c5gv

PHP remote file inclusion vulnerability in modules/mx_smartor/album.php in the mxBB…

LOW 36

PHP remote file inclusion vulnerability in modules/mx_smartor/album.php in the mxBB Smartor Album module 1.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01601 Published 2006-11-08 No fix listed

TI-2006-02300 CVE-2006-2361 · GHSA-xjp3-2m5j-pg7v

PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager…

LOW 39

PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration, as used with phpBB, allows remote attackers to execute arbitrary PHP code via a URL in the module_root_pa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03325 Published 2006-05-15 No fix listed

Vulnerabilities

Filters