CVE-2002-0475 Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a mes...
MediumCVSS 5.1
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpbb group phpbb | = 1.0.0 | No fix listed |
| phpbb group phpbb | = 1.2.0 | No fix listed |
| phpbb group phpbb | = 1.2.1 | No fix listed |
| phpbb group phpbb | = 1.4.0 | No fix listed |
| phpbb group phpbb | = 1.4.1 | No fix listed |
| phpbb group phpbb | = 1.4.2 | No fix listed |
| phpbb group phpbb | = 1.4.4 | No fix listed |
References
- phpbb-cross-site-scripting(7459) vdb-entry vendor-advisory
- www.securiteam.com
- 4379 vdb-entry vendor-advisory