CVE-2005-1113

Multiple cross-site scripting (XSS) vulnerabilities in PhpBB Plus 1.52 and earlier allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) groupcp.php, (2) index.php, (3) portal.php, (4) viewforum.php, or (5) viewtopic.php, (6) the c parameter to index.php, or (7) the article parameter to portal.php.

Published: May 2, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-1113
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
phpbb_group / phpbb_plus	-	1.52.x
phpbb_group / phpbb_plus	1.3	1.3.x
phpbb_group / phpbb_plus	1.51	1.51.x

http://marc.info/?l=bugtraq&m=111343406309969&w=2
http://www.digitalparadox.org/advisories/phpbbp.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/20085

Vulnerability Database

CVE-2005-1113

Deep Security Visibility Without the Complexity