Vulnerability in Phpbb_group Phpbb

CVE-2006-1603

Cross-site scripting (XSS) vulnerability in profile.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML via the cur_password parameter. NOTE: the provenance of this information is unknown; the details are ob…

EPSS: 0.013 (67.9th percentile) — read the EPSS interpretation.

Affected products

Phpbb_group Phpbb — versions 2.0.19
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)