CVE-2005-2161 Cross-site scripting (XSS) vulnerability in phpBB 2.0.16 allows remote attackers to inject arbitrary web script or HTML via nested [url] tags.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in phpBB 2.0.16 allows remote attackers to inject arbitrary web script or HTML via nested [url] tags.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpbb group phpbb | = 2.0.16 | No fix listed |
References
- 20050705 XSS in nested tag in phpbb 2.0.16 mailing-list
- DSA-768 vendor-advisory
- www.securitylab.ru