CVE-2006-0063 | BDVDB-2026-14425 Detail

Description#

Cross-site scripting (XSS) vulnerability in phpBB 2.0.19, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary web script or HTML via a permitted HTML tag with ' (single quote) characters and active attributes such as onmouseover, a variant of CVE-2005-4357.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2006/0051
http://www.osvdb.org/22672
http://securityreason.com/securityalert/313
http://securityreason.com/achievement_securityalert/30

Exploit#

No public exploit known

History#

Version 12006-01-05Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.