vendor:
phpBB
by:
D|ablo CCTEAM
7.5
CVSS
HIGH
Cross-Site Scripting (XSS)
79
CWE
Product Name: phpBB
Affected Version From: 2.0.16
Affected Version To: 2.0.16
Patch Exists: YES
Related CWE: N/A
CPE: a:phpbb:phpbb:2.0.16
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2005
CCTEAM PhpBB 2.0.16 XSS EXPLOIT
This exploit allows an attacker to inject malicious JavaScript code into a vulnerable web application. The malicious code is executed when a user visits the vulnerable page. This exploit targets PhpBB 2.0.16, a popular open source forum software. The malicious code is injected into the application using a specially crafted URL.
Mitigation:
Input validation should be used to prevent malicious code from being injected into the application. Additionally, the application should be kept up to date with the latest security patches.
