4.3
CVSSv2

CVE-2006-2359

Published: 15/05/2006 Updated: 18/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote malicious users to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection.

Vulnerable Product Search on Vulmon Subscribe to Product

phpbb group phpbb

Exploits

source: wwwsecurityfocuscom/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities The issues include cross-site scripting and SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input A successful exploit of these vulnerabilities could allow ...