Test ID:	1.3.6.1.4.1.25623.1.0.13840
Category:	Web application abuses
Title:	phpBB < 2.0.10 Multiple Vulnerabilities
Summary:	phpBB is prone to multiple vulnerabilities.
Description:	Summary: phpBB is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2004-0730: Multiple cross-site scripting (XSS) vulnerabilities - CVE-2004-2054: A HTTP response splitting vulnerability which permits the injection of CRLF characters in the HTTP headers. - CVE-2004-2055: A flaw that allows a remote XSS attack. This flaw exists because the application does not validate user-supplied input in the 'search_author' parameter. Affected Software/OS: phpBB prior to version 2.0.10. Solution: Update to version 2.0.10 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0730 BugTraq ID: 10738 http://www.securityfocus.com/bid/10738 Bugtraq: 20040716 [waraxe-2004-SA#034 - XSS and path full path disclosure in PhpBB 2.0.8] (Google Search) http://marc.info/?l=bugtraq&m=108999024506020&w=2 http://www.waraxe.us/index.php?modname=sa&id=34 XForce ISS Database: phpbb-indexphp-xss(16724) https://exchange.xforce.ibmcloud.com/vulnerabilities/16724 XForce ISS Database: phpbb-lang-bbcode-xss(16726) https://exchange.xforce.ibmcloud.com/vulnerabilities/16726 XForce ISS Database: phpbb-lang-faq-xss(16725) https://exchange.xforce.ibmcloud.com/vulnerabilities/16725 Common Vulnerability Exposure (CVE) ID: CVE-2004-2054 BugTraq ID: 10753 http://www.securityfocus.com/bid/10753 Bugtraq: 20040720 PhpBB HTTP Response Splitting & Cross Site Scripting vulnerabilities (Google Search) http://marc.info/?l=bugtraq&m=109034476122723&w=2 http://secunia.com/advisories/12114 XForce ISS Database: phpbb-search-response-splitting(16759) https://exchange.xforce.ibmcloud.com/vulnerabilities/16759 Common Vulnerability Exposure (CVE) ID: CVE-2004-2055 XForce ISS Database: phpbb-search-searchauthor-xss(16758) https://exchange.xforce.ibmcloud.com/vulnerabilities/16758
Copyright	Copyright (C) 2005 David Maciejak

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.