phpbb advanced guestbook vulnerabilities and fixes

Recent CVEs affecting phpbb advanced guestbook, with upgrade or downgrade steps. 3 tracked.

Also searched as: phpbbadvancedguestbook.

phpbb advanced guestbook has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-03-02. Highest priority: CVE-2006-2152 (score 55/100).

• CVE-2006-7077 MEDIUM 6.8 DOWNGRADE SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to ex
• CVE-2006-7076 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote at
• CVE-2006-2152 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, w

FAQ

How do I fix phpbb advanced guestbook vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is phpbb advanced guestbook being exploited right now?

None of the tracked phpbb advanced guestbook CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which phpbb advanced guestbook CVE should I patch first?

CVE-2006-2152 currently ranks highest (55/100): PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, w.

RSS feed for phpbb advanced guestbook · ← Back to latest CVEs