Description
Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter.
References
- phpbb-viewtopicphp-xss(15348) vdb-entry
- 9765 vdb-entry
- 20040228 New phpBB ViewTopic.php Cross Site Scripting Vulnerability mailing-list