CVE-2005-4357: XSS
Cross-site scripting (XSS) vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary Javascript via a permitted HTML tag with " (quote) characters and active attributes such as onmouseover.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4357?
CVE-2005-4357 is considered a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2005-4357?
To fix CVE-2005-4357, users should upgrade to a patched version of phpBB that addresses this cross-site scripting vulnerability.
What versions of phpBB are affected by CVE-2005-4357?
CVE-2005-4357 specifically affects phpBB version 2.0.18 when the 'Allowed HTML tags' feature is enabled.
What type of attack does CVE-2005-4357 enable?
CVE-2005-4357 enables remote attackers to perform cross-site scripting (XSS) attacks by injecting malicious JavaScript.
Can I mitigate the risk of CVE-2005-4357 without upgrading phpBB?
Mitigating CVE-2005-4357 without upgrading can be challenging, but disabling 'Allowed HTML tags' may reduce immediate exposure.