Unscored CVE-2004-2055 EUVD-2004-2047GHSA-xh89-vmqr-6c3j

Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web sc…

Published May 10, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the search_author parameter.

References

20040720 PhpBB HTTP Response Splitting & Cross Site Scripting vulnerabilities mailing-list
10753 vdb-entry
phpbb-search-searchauthor-xss(16758) vdb-entry
12114 third-party-advisory