phpBB forum fixes auth bypass bug lurking for a decade
Teaser from the source
A 10-year-old authentication bypass vulnerability discovered in the phpBB forum software allows an attacker to log in as any user, including administrators. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on phpBB
Other advisories
- HighCVE-2026-87901phpBB: Cross-Site-Scripting (XSS)
- HighCVE-2026-87901phpBB: Cross-Site-Scripting (XSS)
- MediumCVE-2026-107422Axew3.com WP w3all phpBB: Cross-Site-Scripting (XSS)
- HighCVE-2026-78293Axew3 WP w3all phpBB: Cross-Site-Scripting (XSS)
- HighCVE-2026-78293Nicht authentifizierter Cross-Site-Scripting (XSS) in WP w3all phpBB-Versionen bis einschließlich 3.
- HighCVE-2026-73998Axew3 WP w3all phpBB: SQL-Injection
- HighCVE-2026-73998SQL-Injektion für Abonnenten in WP w3all und phpBB-Versionen bis einschließlich 3.
- HighCVE-2026-48612phpBB: Cross-Site-Request-Forgery (CSRF)
ID