CVE-2025-70811

概要

参考情報

• github.com/ariefibis · Not Applicable
• ariefibis/PHPBB security advisory · Mitigation
• linkedin.com/in/mohammed-a-6a2548112 · Not Applicable

phpbb のその他の脆弱性

• CVE-2026-29199高 8.1phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When force_server_vars is disabled…
• CVE-2025-70810高 8.8Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the login function an…
• CVE-2023-5917中 6.1A vulnerability, which was classified as problematic, has been found in phpBB up to 3.3.10. This issue affects the function main of the file…
• CVE-2020-8226中 5.8A vulnerability exists in phpBB <v3.2.10 and <v3.3.1 which allowed remote image dimensions check to be used to SSRF.
• CVE-2019-16108高 7.5phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets (CSS) token sequence to a page through BBCode.