20021203 Cross-site Scripting Vulnerability in phpBB 2.0.3mailing list
http://archives.neohapsis.com/archives/bugtraq/2002-12/0053.html CVE-2002-2255
phpBB 2.0.3 - 'search.php' Cross-Site Scripting
Record summary
CVE-2002-2255 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the search_username parameter in searchuser mode.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBphpBB 2.0.3 - 'search.php' Cross-Site ScriptingExploitDB exploitby f_a_aNot analyzed1 file
References
46311vdb entry
http://www.securityfocus.com/bid/6311 phpbb-search-username-xss(10773)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/10773 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-2255