Test Kennung:	1.3.6.1.4.1.25623.1.0.20379
Kategorie:	Web application abuses
Titel:	phpBB <= 2.0.18 Multiple Cross-Site Scripting Flaws
Zusammenfassung:	The remote web server contains a PHP application that is affected by; several flaws.;; Description :;; According to its version number, the remote version of this software; is vulnerable to Javascript injection issues using 'url' bbcode tags; and, if HTML tags are enabled, HTML more generally.
Beschreibung:	Summary: The remote web server contains a PHP application that is affected by several flaws. Description : According to its version number, the remote version of this software is vulnerable to Javascript injection issues using 'url' bbcode tags and, if HTML tags are enabled, HTML more generally. Vulnerability Impact: This may allow an attacker to inject hostile Javascript into the forum system, to steal cookie credentials or misrepresent site content. When the form is submitted the malicious Javascript will be incorporated into dynamically generated content. Solution: Upgrade to phpBB version 2.0.19 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	BugTraq ID: 16088
Copyright	This script is Copyright (C) 2006 David Maciejak

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.