CVE-2005-1115 | Vulnerability Database | Aqua Security

Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or (2) album_comment.php.

Affected Software

Name	Vendor	Start Version	End Version
Phpbb	Phpbb_group	2.0.0 (including)	2.0.0 (including)
Phpbb	Phpbb_group	2.0.1 (including)	2.0.1 (including)
Phpbb	Phpbb_group	2.0.2 (including)	2.0.2 (including)
Phpbb	Phpbb_group	2.0.3 (including)	2.0.3 (including)
Phpbb	Phpbb_group	2.0.4 (including)	2.0.4 (including)
Phpbb	Phpbb_group	2.0.5 (including)	2.0.5 (including)
Phpbb	Phpbb_group	2.0.6 (including)	2.0.6 (including)
Phpbb	Phpbb_group	2.0.6c (including)	2.0.6c (including)
Phpbb	Phpbb_group	2.0.6d (including)	2.0.6d (including)
Phpbb	Phpbb_group	2.0.7 (including)	2.0.7 (including)
Phpbb	Phpbb_group	2.0.7a (including)	2.0.7a (including)
Phpbb	Phpbb_group	2.0.8 (including)	2.0.8 (including)
Phpbb	Phpbb_group	2.0.8a (including)	2.0.8a (including)
Phpbb	Phpbb_group	2.0.9 (including)	2.0.9 (including)
Phpbb	Phpbb_group	2.0.10 (including)	2.0.10 (including)
Phpbb	Phpbb_group	2.0.11 (including)	2.0.11 (including)
Phpbb	Phpbb_group	2.0.12 (including)	2.0.12 (including)
Phpbb	Phpbb_group	2.0.13 (including)	2.0.13 (including)
Photo_album	Smartor	2.0.53 (including)	2.0.53 (including)

References

http://marc.info/?l=bugtraq\u0026m=111343406309969\u0026w=2
http://www.digitalparadox.org/advisories/phpbbp.txt
http://www.securityfocus.com/bid/13157
http://www.securityfocus.com/bid/13158

NVD	https://nvd.nist.gov/vuln/detail/CVE-2005-1115
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html