CVE-2002-0475

Published: Aug 12, 2002Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message.

Affected (7)

Products: Phpbb Group: Phpbb

Phpbb Group

1 product

Phpbb

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Phpbb Group Phpbb	Version 1.0.0
Phpbb Group Phpbb	Version 1.2.0
Phpbb Group Phpbb	Version 1.2.1
Phpbb Group Phpbb	Version 1.4.0
Phpbb Group Phpbb	Version 1.4.1
Phpbb Group Phpbb	Version 1.4.2
Phpbb Group Phpbb	Version 1.4.4