返回 CVE 瀏覽器

CVE-2006-6841

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1460%

EPSS Percentile11.03th

Published2006年12月31日

Last Modified2026年4月23日

Vulnerability Description

Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors.

Affected Platforms (CPE)

📦

Phpbb Group

Phpbb

= 1.2.4_rc3

📦

Phpbb Group

Phpbb

= 2.0.18

📦

Phpbb Group

Phpbb

= 2.0.20

📦

Phpbb Group

Phpbb

= 2.0.21

References & Advisories

🔗 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=405980

🔗 http://secunia.com/advisories/28871

🔗 http://www.debian.org/security/2008/dsa-1488

🔗 http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624

🔗 http://www.securityfocus.com/bid/21806

🔗 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=405980

🔗 http://secunia.com/advisories/28871

🔗 http://www.debian.org/security/2008/dsa-1488

相關漏洞威脅

CVE-2002-153710.0

admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with mo...

CVE-2006-683910.0

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redir...

CVE-2002-047310.0

db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the ph...

CVE-2006-684010.0

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start paramet...