CVE-2002-0475: Medium severity Phpbb Group Phpbb vulnerability
Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0475?
CVE-2002-0475 is considered a medium severity vulnerability due to its ability to allow remote attackers to execute arbitrary JavaScript on client browsers.
How do I fix CVE-2002-0475?
To mitigate CVE-2002-0475, upgrade phpBB to version 1.4.5 or later, which includes fixes for this cross-site scripting vulnerability.
What versions of phpBB are affected by CVE-2002-0475?
CVE-2002-0475 affects phpBB versions 1.4.4 and earlier, including all 1.4.x versions below 1.4.5.
What type of attack can exploit CVE-2002-0475?
CVE-2002-0475 can be exploited through cross-site scripting attacks where an attacker embeds malicious JavaScript within an IMG tag.
Who can be impacted by CVE-2002-0475?
Users of vulnerable phpBB forums can be impacted by CVE-2002-0475, as their web browsers may execute arbitrary scripts from untrusted sources.