phpBB: HTML code injection attempt


Description   Using the signature_bbcode_uid parameter, an attacker could use a specially crafted URL to execute arbitrary code on the server.
     
Default
configuration
 
Profiles High Medium Low Internet
Action Block Block Pass Block
Alarm Level Minor Minor Minor Minor
     
References   URL: http://www.hardened-php.net/advisory_172005.75.html
URL: http://www.frsirt.com/exploits/20051224.r57phpbb2017.pl.php
     
Available since   ASQ v3.2.0
     
Protects   phpBB Remote Command Execution and SQL Injection Vulnerabilities
100 last CVE   CVE-2005-3419
CVE-2005-3418
CVE-2005-3417
CVE-2005-3416
CVE-2005-3415


 
 
 
 
 Risk level 
Moderate