CVE-2002-0902

Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a…

published August 31, 2002

CVSS
—
EPSS
7%
Percentile
94.2
In the wild
Unconfirmed
What it is

Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07157 · 94.2th percentile
Published
2002-08-31T04:00Z
EPSS history
Timeline
  • 31 AUG 04:00Z
    Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a…
    cvelistv5