CVE-2005-3418 — Cross-site Scripting in Group Phpbb

2 documents2 sources
Severity
4.3MEDIUMNVD
EPSS
1.5%
top 19.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpbb Group Phpbb
Timeline
PublishedNov 1
Latest updateMay 1

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to usercp_register.php, (2) forward_page parameter to login.php, and (3) list_cat parameter to search.php, which are not initialized as variables.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDphpbb_group/phpbb27 versions+26

Patches

Patch: securitytracker.com ↗Patch: www.hardened-php.net ↗Patch: www.osvdb.org ↗

🔴Vulnerability Details

1
GHSA
GHSA-f86m-4hjx-mgqr: Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2↗2022-05-01
▶