CVE-2005-1193: High severity Phpbb Group Phpbb vulnerability
The bbencodesecondpass and makeclickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, privmsg.php, and other scripts, allow remote attackers to execute arbitrary script via a BBcode tag with a (1) javascript:, (2) applet:, (3) about:, (4) activex:, (5) chrome:, or (6) script: URI scheme, as demonstrated using the URL tag.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1193?
CVE-2005-1193 is classified as a high severity vulnerability due to its potential for arbitrary script execution by remote attackers.
How do I fix CVE-2005-1193?
To fix CVE-2005-1193, upgrade phpBB to version 2.0.15 or later.
What versions of phpBB are affected by CVE-2005-1193?
CVE-2005-1193 affects phpBB versions prior to 2.0.15, including various versions from 2.0.0 to 2.0.14.
What are the consequences of exploiting CVE-2005-1193?
Exploiting CVE-2005-1193 allows an attacker to execute arbitrary scripts, potentially leading to user data theft or defacement.
Can CVE-2005-1193 be mitigated without upgrading phpBB?
While the best mitigation for CVE-2005-1193 is to upgrade, input validation and sanitization can reduce the risk of exploitation.