Unscored CVE-2006-0063 EUVD-2006-0071GHSA-x2wh-mc38-3gh3

Cross-site scripting (XSS) vulnerability in phpBB 2.0.19, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary …

Published Jan 5, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in phpBB 2.0.19, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary web script or HTML via a permitted HTML tag with ' (single quote) characters and active attributes such as onmouseover, a variant of CVE-2005-4357.

References

ADV-2006-0051 vdb-entry
22672 vdb-entry
313 third-party-advisory
20060105 phpBB 2.0.19 XSS third-party-advisory