Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or (2) album_comment.php.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Phpbb Group | Phpbb | 2.0.0 |
| Smartor | Photo Album | 2.0.53 |
References
- http://marc.info/?l=bugtraq&m=111343406309969&w=2
- http://www.digitalparadox.org/advisories/phpbbp.txt
- http://www.securityfocus.com/bid/13157Exploit
- http://www.securityfocus.com/bid/13158Exploit
- http://marc.info/?l=bugtraq&m=111343406309969&w=2
- http://www.digitalparadox.org/advisories/phpbbp.txt
- http://www.securityfocus.com/bid/13157Exploit
- http://www.securityfocus.com/bid/13158Exploit
FAQ
What is CVE-2005-1115?
CVE-2005-1115 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or ...
How severe is CVE-2005-1115?
CVE-2005-1115 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-1115?
Check the references section above for vendor advisories and patch information. Affected products include: Phpbb Group Phpbb, Smartor Photo Album.