CVE Vulnerabilities

CVE-2005-0673

Published: May 02, 2005 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

Cross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or HTML by setting the (1) allowhtml, (2) allowbbcode, or (3) allowsmilies parameters to inject HTML into signatures for personal messages, possibly when they are processed by privmsg.php or viewtopic.php.

Affected Software

Name Vendor Start Version End Version
Phpbb Phpbb_group 2.0.13 (including) 2.0.13 (including)
Phpbb2 Ubuntu dapper *
Phpbb2 Ubuntu devel *
Phpbb2 Ubuntu edgy *
Phpbb2 Ubuntu feisty *

References