Lucene search

Ubuntu.comUB:CVE-2005-4357

HistoryDec 20, 2005 - 12:00 a.m.

CVE-2005-4357

2005-12-2000:00:00

ubuntu.com

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.025 Low

EPSS

Percentile

89.9%

JSON

Cross-site scripting (XSS) vulnerability in phpBB 2.0.18, when “Allowed
HTML tags” is enabled, allows remote attackers to inject arbitrary
Javascript via a permitted HTML tag with " (quote) characters and active
attributes such as onmouseover.

OSVersionArchitecturePackageVersionFilename
ubuntu6.10noarchphpbb2< 2.0.21-3UNKNOWN
ubuntu7.04noarchphpbb2< 2.0.21-3UNKNOWN
ubuntu7.10noarchphpbb2< 2.0.21-3UNKNOWN
ubuntu8.04noarchphpbb2< 2.0.21-3UNKNOWN
ubuntu8.10noarchphpbb2< 2.0.21-3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.10	noarch	phpbb2	< 2.0.21-3	UNKNOWN
ubuntu	7.04	noarch	phpbb2	< 2.0.21-3	UNKNOWN
ubuntu	7.10	noarch	phpbb2	< 2.0.21-3	UNKNOWN
ubuntu	8.04	noarch	phpbb2	< 2.0.21-3	UNKNOWN
ubuntu	8.10	noarch	phpbb2	< 2.0.21-3	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2005-4357

nvd.nist.gov/vuln/detail/CVE-2005-4357

security-tracker.debian.org/tracker/CVE-2005-4357

www.cve.org/CVERecord?id=CVE-2005-4357

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.025 Low

EPSS

Percentile

89.9%

JSON

Related for UB:CVE-2005-4357