GCVE-110-CERTCC-2004-497400

Advisory Published

Vulnetix · Advisory published November 19, 2004

phpBB contains an user input validation problem with regard to the parsing of the URL. An intruder can deface a phpBB website, execute arbitrary commands, or gain administrative privileges on a compromised bulletin board.

Download JSON Open in Console

Risk Scores

certcc-cam

impact15population10exploitation17widely_known20score_current37.96875ease_of_exploitation15

References

phpBB viewtopic.php fails to properly sanitize input passed to the "highlight" parameter

advisory

phpBB viewtopic.php fails to properly sanitize input passed to the "highlight" parameter

url

phpBB viewtopic.php fails to properly sanitize input passed to the "highlight" parameter

url

phpBB viewtopic.php fails to properly sanitize input passed to the "highlight" parameter

url

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON