Unscored CVE-2005-1290 EUVD-2005-1293GHSA-r8h3-ggcr-rj73

Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote attackers to inject arbitrary web script or HT…

Published Apr 26, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u parameter to profile.php, (2) highlight parameter to viewtopic.php, or (3) forumname or forumdesc parameters to admin_forums.php.

References

20050423 -==phpBB 2.0.14 Multiple Vulnerabilities==- mailing-list
http://neosecurityteam.net/Advisories/Advisory-14.txt