CVE-2005-1113

Multiple cross-site scripting (XSS) vulnerabilities in PhpBB Plus 1.52 and earlier allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) groupcp.php, (2) index.php, (3) portal.php, (4) viewforum.php, or (5) viewtopic.php, (6) the c parameter to index.php, or (7) the article parameter to portal.php.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://marc.info/?l=bugtraq&m=111343406309969&w=2
http://www.digitalparadox.org/advisories/phpbbp.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/20085
http://marc.info/?l=bugtraq&m=111343406309969&w=2
http://www.digitalparadox.org/advisories/phpbbp.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/20085

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:phpbb_group:phpbb_plus::::::::
	cpe:2.3:a:phpbb_group:phpbb_plus:1.3:::::::*
	cpe:2.3:a:phpbb_group:phpbb_plus:1.51:::::::*

History

20 Nov 2024, 23:56

Type	Values Removed	Values Added
References	~~() http://marc.info/?l=bugtraq&m=111343406309969&w=2 -~~	() http://marc.info/?l=bugtraq&m=111343406309969&w=2 -
References	~~() http://www.digitalparadox.org/advisories/phpbbp.txt -~~	() http://www.digitalparadox.org/advisories/phpbbp.txt -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/20085 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/20085 -

Information

Published : 2005-05-02 04:00

Updated : 2024-11-20 23:56

NVD link : CVE-2005-1113

Mitre link : CVE-2005-1113

CVE.ORG link : CVE-2005-1113

JSON object : View

Products Affected

phpbb_group

phpbb_plus

CWE

NVD-CWE-Other

{"id": "CVE-2005-1113", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-05-02T04:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=111343406309969&w=2", "source": "cve@mitre.org"}, {"url": "http://www.digitalparadox.org/advisories/phpbbp.txt", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20085", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=111343406309969&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.digitalparadox.org/advisories/phpbbp.txt", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20085", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in PhpBB Plus 1.52 and earlier allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) groupcp.php, (2) index.php, (3) portal.php, (4) viewforum.php, or (5) viewtopic.php, (6) the c parameter to index.php, or (7) the article parameter to portal.php."}], "lastModified": "2024-11-20T23:56:38.360", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:phpbb_group:phpbb_plus:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3AFB65B2-EB39-4600-A70A-29CBCB135E24", "versionEndIncluding": "1.52"}, {"criteria": "cpe:2.3:a:phpbb_group:phpbb_plus:1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75E801BC-950C-470C-9B81-4EC8AFE94463"}, {"criteria": "cpe:2.3:a:phpbb_group:phpbb_plus:1.51:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88419564-C16A-4F15-8251-3EF32B65F26A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}