Vulnerability in phpBB Group

CVE-2004-2130

Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the (1) folder or (2) mode variables.

EPSS: 0.065 (93.1th percentile) — read the EPSS interpretation.

Affected products

Phpbb_group Phpbb — versions 2.0.6
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch, Vendor Advisory)