Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to usercp_register.php, (2) forward_page parameter to login.php, and (3) list_cat parameter to search.php, which are not initialized as variables.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpBB 多个跨站脚本攻击(XSS)漏洞
Vulnerability Description
phpBB 2是一个论坛软件,使用PHP语言开发的并开放其原始码。 phpBB 2.0.17及更早版本中的多个跨站脚本攻击(XSS)漏洞,可让远程攻击者通过并未初始化为变量的(1) usercp_register.php的error_msg参数、(2) login.php的forward_page参数和(3) search.php的list_cat参数来注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A