CVE-2004-0339 Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter.
MediumCVSS 6.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpbb group phpbb | = 2.0 | No fix listed |
| phpbb group phpbb | = 2.0.1 | No fix listed |
| phpbb group phpbb | = 2.0.2 | No fix listed |
| phpbb group phpbb | = 2.0.3 | No fix listed |
| phpbb group phpbb | = 2.0.4 | No fix listed |
| phpbb group phpbb | = 2.0.5 | No fix listed |
| phpbb group phpbb | = 2.0.6 | No fix listed |
| phpbb group phpbb | = 2.0.6c | No fix listed |
| phpbb group phpbb | = 2.0_rc4 | No fix listed |
References
- 20040228 New phpBB ViewTopic.php Cross Site Scripting Vulnerability mailing-list
- 9765 patch vdb-entry
- phpbb-viewtopicphp-xss(15348) vdb-entry