Lucene search

[email protected]CVE-2005-1113

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-1113

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

cve-2005-1113

xss

phpbb

security

vulnerability

remote attack

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in PhpBB Plus 1.52 and earlier allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) groupcp.php, (2) index.php, (3) portal.php, (4) viewforum.php, or (5) viewtopic.php, (6) the c parameter to index.php, or (7) the article parameter to portal.php.

Affected configurations

NVD

Node

phpbb_groupphpbb_plusRange≤1.52

phpbb_groupphpbb_plusMatch1.3

phpbb_groupphpbb_plusMatch1.51

CPENameOperatorVersion
phpbb_group:phpbb_plusphpbb group phpbb plusle1.52
phpbb_group:phpbb_plusphpbb group phpbb pluseq1.3
phpbb_group:phpbb_plusphpbb group phpbb pluseq1.51

CPE	Name	Operator	Version
phpbb_group:phpbb_plus	phpbb group phpbb plus	le	1.52
phpbb_group:phpbb_plus	phpbb group phpbb plus	eq	1.3
phpbb_group:phpbb_plus	phpbb group phpbb plus	eq	1.51

References

marc.info/?l=bugtraq&m=111343406309969&w=2

www.digitalparadox.org/advisories/phpbbp.txt

exchange.xforce.ibmcloud.com/vulnerabilities/20085

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.3%

JSON

Related for CVE-2005-1113

cvelist1 nvd1 nessus1