CVE-2004-2055

MEDIUM 4.3CVE-2004-2055 · Published 19/07/2004 · updated 16/06/2026

In short

CVE-2004-2055 is a MEDIUM (CVSS 4.3) vulnerability affecting phpbb (phpbb group).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 69.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpbb phpbb_group	`= 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.6c= 2.0.6d= 2.0.7= 2.0.7a= 2.0.8= 2.0.8a= 2.0.9= 2.0_beta1= 2.0_rc1= 2.0_rc2= 2.0_rc3= 2.0_rc4`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the search_author parameter.

References

marc.info
secunia.com/advisories/12114 · Vendor Advisory
securityfocus.com/bid/10753 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/16758

More vulnerabilities in phpbb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

phpbb

phpbb_group

= 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.6c= 2.0.6d= 2.0.7= 2.0.7a= 2.0.8= 2.0.8a= 2.0.9= 2.0_beta1= 2.0_rc1= 2.0_rc2= 2.0_rc3= 2.0_rc4

No fix yet

More vulnerabilities in phpbb

See all →