high7.5Public exploit code
CVE-2005-1193
The bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, privmsg.php, and other scripts, allow re…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpBB 2.0.x - 'BBCode.php' URL Tag2005-05-09 · webapps · jsp · Verified
Impact
The bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, privmsg.php, and other scripts, allow remote attackers to execute arbitrary script via a BBcode tag with a (1) javascript:, (2) applet:, (3) about:, (4) activex:, (5) chrome:, or (6) script: URI scheme, as demonstrated using the URL tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpbb Group | Phpbb | Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5 |
References
- NVD record
- CVE.org record
- http://castlecops.com/t123194-.html
- http://marc.info/?l=full-disclosure&m=111552510000088&w=2
- http://seclists.org/lists/bugtraq/2005/May/0098.html
- http://secunia.com/advisories/15298
- http://securitytracker.com/id?1013918
- http://securitytracker.com/id?1014117
- http://www.kb.cert.org/vuls/id/113196
- http://www.osvdb.org/16439
- http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=288194
- http://www.securityfocus.com/bid/13545
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20574
- http://castlecops.com/t123194-.html
- http://marc.info/?l=full-disclosure&m=111552510000088&w=2
- http://seclists.org/lists/bugtraq/2005/May/0098.html
- http://secunia.com/advisories/15298
- http://securitytracker.com/id?1013918
- http://securitytracker.com/id?1014117
- http://www.kb.cert.org/vuls/id/113196
- http://www.osvdb.org/16439
- http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=288194
- http://www.securityfocus.com/bid/13545
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20574