Unscored CVE-2007-5033 EUVD-2007-5014GHSA-pgcw-c67j-wcfc

Cross-site scripting (XSS) vulnerability in profile.php in phpBB XS 2 allows remote attackers to inject arbitrary web script or HTML via th…

Published Sep 21, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in profile.php in phpBB XS 2 allows remote attackers to inject arbitrary web script or HTML via the selfdes parameter in a profile_info editprofile action.

References

38884 vdb-entry
3158 third-party-advisory
25750 vdb-entry
20070920 PhpBB Xs 2 profile.php Permanent Xss Vulnerability mailing-list
phpbbxs-profile-xss(36707) vdb-entry