CVE-2004-2130

Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the (1) folder or (2) mode variables.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2004-12-23

Last modified

2024-08-08

Affected products

• Phpbb (Phpbb Group)

References

• http://marc.info/?l=bugtraq&m=107530946123822&w=2
• http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943
• http://www.securityfocus.com/bid/9290