CVE-2006-0450

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-01-27 · updated 2026-06-16

Description

phpBB 2.0.19 and earlier allows remote attackers to cause a denial of service (application crash) by (1) registering many users through profile.php or (2) using search.php to search in a certain way that confuses the database.

Affected products

Phpbb Group Phpbb: 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5 (+23)

References

http://h4cky0u.org/viewtopic.php?t=637
http://securityreason.com/securityalert/368
http://www.h4cky0u.org/advisories/HYSA-2006-001-phpbb.txt
http://www.securityfocus.com/archive/1/423030/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/24327
http://h4cky0u.org/viewtopic.php?t=637
http://securityreason.com/securityalert/368
http://www.h4cky0u.org/advisories/HYSA-2006-001-phpbb.txt
http://www.securityfocus.com/archive/1/423030/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/24327

Get alerted when CVE-2006-0450 or the next vulnerability affects your stack