How many CVEs does phpBB phpbb have?

phpBB phpbb has 129 published CVE records since 2002.

How many phpBB phpbb CVEs are in CISA KEV?

None of phpBB phpbb's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for phpBB phpbb vulnerabilities?

Yes — 61 of phpBB phpbb's CVEs have a known public exploit.

Which versions of phpBB phpbb are affected?

123 distinct phpBB phpbb versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in phpBB phpbb CVEs?

phpBB phpbb's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical phpBB phpbb vulnerabilities are there?

phpBB phpbb has 10 critical and 46 high-severity CVEs.

What is the average severity of phpBB phpbb CVEs?

The average CVSS base score across phpBB phpbb's scored CVEs is 6.4.

phpbb Vulnerabilities: CVEs, CISA KEV & Security Advisories

Severity and exploitation

How the CVSS severity of phpbb's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical10

High46

Medium71

Low2

In CISA’s Known Exploited Vulnerabilities catalog

None of phpbb's CVEs are currently listed in CISA's KEV catalog.

Public exploits

61 of phpbb's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every phpbb version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

release-3.2.73 CVEs
release-3.2.7-RC13 CVEs
3.3.15-NA2 CVEs
release-3.2.82 CVEs
release-3.2.8-RC12 CVEs
release-3.3.152 CVEs
release-3.1.71 CVE
release-3.1.7-RC11 CVE
release-3.2.01 CVE
release-3.2.10-RC11 CVE
release-3.2.10-RC21 CVE

Frequently asked questions

Common questions about phpbb vulnerabilities.

How many CVEs does phpBB phpbb have?: phpBB phpbb has 129 published CVE records since 2002.
How many phpBB phpbb CVEs are in CISA KEV?: None of phpBB phpbb's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for phpBB phpbb vulnerabilities?: Yes — 61 of phpBB phpbb's CVEs have a known public exploit.
Which versions of phpBB phpbb are affected?: 123 distinct phpBB phpbb versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in phpBB phpbb CVEs?: phpBB phpbb's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
How many critical phpBB phpbb vulnerabilities are there?: phpBB phpbb has 10 critical and 46 high-severity CVEs.
What is the average severity of phpBB phpbb CVEs?: The average CVSS base score across phpBB phpbb's scored CVEs is 6.4.

phpbb Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Common weakness types

Disclosure activity by year

Other phpBB products

Frequently asked questions

References

Track phpbb vulnerabilities

Version ranges

Fixed in