Lucene search
HistoryNov 23, 2004 - 5:00 a.m.
CVE-2004-0339
phpbb
xss
viewtopic.php
vulnerability
remote code execution
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.3%
Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter.
Affected configurations
Node
phpbb_groupphpbbMatch2.0
ORphpbb_groupphpbbMatch2.0.1
ORphpbb_groupphpbbMatch2.0.2
ORphpbb_groupphpbbMatch2.0.3
ORphpbb_groupphpbbMatch2.0.4
ORphpbb_groupphpbbMatch2.0.5
ORphpbb_groupphpbbMatch2.0.6
ORphpbb_groupphpbbMatch2.0.6c
ORphpbb_groupphpbbMatch2.0_rc4
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.3%
Related for CVE-2004-0339