CVE-2004-2130

Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the (1) folder or (2) mode variables.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

6.54% chance of exploitation in the next 30 days, 94th percentile

Published

2005-05-27

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23475

Security advisories

• http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943
• http://www.securityfocus.com/bid/9290

References

• CVE Record
• NVD entry