CVE-2005-1115

Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or (2) album_comment.php.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*
cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*
cpe:2.3:a:smartor:photo_album:2.0.53:*:*:*:*:*:*:*

History

20 Nov 2024, 23:56

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=111343406309969&w=2 - () http://marc.info/?l=bugtraq&m=111343406309969&w=2 -
References () http://www.digitalparadox.org/advisories/phpbbp.txt - () http://www.digitalparadox.org/advisories/phpbbp.txt -
References () http://www.securityfocus.com/bid/13157 - Exploit () http://www.securityfocus.com/bid/13157 - Exploit
References () http://www.securityfocus.com/bid/13158 - Exploit () http://www.securityfocus.com/bid/13158 - Exploit

Information

Published : 2005-05-02 04:00

Updated : 2024-11-20 23:56


NVD link : CVE-2005-1115

Mitre link : CVE-2005-1115

CVE.ORG link : CVE-2005-1115


JSON object : View

Products Affected

phpbb_group

  • phpbb

smartor

  • photo_album