CVE-2004-2130 - Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the (1) folder or (2) mode variables

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the (1) folder or (2) mode variables

Published May 27, 2005

4.3

MEDIUM

CVSS 2.0

EPSS 6.54%

Description

Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the (1) folder or (2) mode variables.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://marc.info/?l=bugtraq&m=107530946123822&w=2
mailing-listx_refsource_BUGTRAQ
http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943
x_refsource_CONFIRMExploitPatchVendor Advisory
http://www.securityfocus.com/bid/9290
vdb-entryx_refsource_BIDExploitPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-2122
Advisory

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=107530946123822&w=2		mailing-listx_refsource_BUGTRAQ
http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943		x_refsource_CONFIRMExploitPatchVendor Advisory
http://www.securityfocus.com/bid/9290		vdb-entryx_refsource_BIDExploitPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-2122		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 27, 2005

Updated Aug 8, 2024

Reserved May 27, 2005

Link CVE-2004-2130

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2004-2130

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 27, 2005

Updated Aug 8, 2024

Link EUVD-2004-2122

GitHub

No data