Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-110973. PoCs published by GulfTech Security.
AI-analyzed exploit summary This is a writeup detailing a Cross-Site Scripting (XSS) vulnerability in phpBB versions <= 2.0.6d. The vulnerability exists in the 'viewforum.php' and 'viewtopic.php' files due to insufficient input validation on the 'topicdays' and 'postdays' parameters, respectively.
Description
phpBB < 2.0.6d - Cross Site Scripting
Exploits (1)
exploitdb
WRITEUP
by GulfTech Security · textwebappsphp
https://www.exploit-db.com/exploits/43801
This is a writeup detailing a Cross-Site Scripting (XSS) vulnerability in phpBB versions <= 2.0.6d. The vulnerability exists in the 'viewforum.php' and 'viewtopic.php' files due to insufficient input validation on the 'topicdays' and 'postdays' parameters, respectively.
Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
phpBB <= 2.0.6d
No auth needed
Prerequisites:
Valid forum or topic ID · Query must display results for XSS to execute
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026