Exploit

EDB-ID: 25401	Author: Dcrab	Published: 2005-04-13
CVE: N/A	Type: Webapps	Platform: PHP
Aliases: N/A	Advisory/Source: Link	Tags: Vulnerability
E-DB Verified:	Exploit: Download / View Raw	Vulnerable App: N/A

« Previous Exploit Next Exploit »

source: http://www.securityfocus.com/bid/13153/info

phpBB2 Plus is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/viewtopic.php?p=58834&amp%3bsid='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E

Related Exploits

Other Possible E-DB Search Terms: PHPBB2 Plus 1.5, PHPBB2 Plus

Date	Title	Author
2005-04-13	PHPBB2 Plus 1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities	Dcrab
2005-04-13	PHPBB2 Plus 1.5 - GroupCP.php Cross-Site Scripting	Dcrab
2005-04-13	PHPBB2 Plus 1.5 - Portal.php Multiple Cross-Site Scripting Vulnerabilities	Dcrab
2010-03-17	PHPBB2 Plus 1.53 - 'kb.php' SQL Injection	Gamoscu
2006-12-28	phpBB2 Plus 1.53 - (Acronym Mod) SQL Injection	the master

PHPBB2 Plus 1.5 - viewtopic.php Cross-Site Scripting

Related Exploits