Phpbb Group » Phpbb » 2.0.3 : Security Vulnerabilities, CVEs, Published In 2005 (XSS)
Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to usercp_register.php, (2) forward_page parameter to login.php, and (3) list_cat parameter to search.php, which are not initialized as variables.
Max CVSS
4.3
EPSS Score
0.64%
Published
2005-11-01
Updated
2016-10-18
Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u parameter to profile.php, (2) highlight parameter to viewtopic.php, or (3) forumname or forumdesc parameters to admin_forums.php.
Max CVSS
4.3
EPSS Score
0.19%
Published
2005-05-02
Updated
2016-10-18
Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or (2) album_comment.php.
Max CVSS
4.3
EPSS Score
0.55%
Published
2005-05-02
Updated
2016-10-18
3 vulnerabilities found