Description
Cross-site scripting (XSS) vulnerability in phpBB 2.0.6d and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) postdays parameter to viewtopic.php or (2) topicdays parameter to viewforum.php.
References
- http://www.phpbb.com/support/documents.php?mode=changelog#206
- 4259 vdb-entry
- 4257 vdb-entry
- 20040313 phpBB 2.0.6d && Earlier Security Issues mailing-list
- 11121 third-party-advisory
- phpbb-viewforum-viewtopic-xss(15464) vdb-entry
- 9865 vdb-entry
- 9866 vdb-entry