| Package | Affected versions | Patched versions |
|---|---|---|
| phpbb | = 2.0.0= 2.0_beta1= 2.0_rc1= 2.0_rc2= 2.0_rc3= 2.0_rc4 |
Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free