BID:9865

PHPBB ViewTopic.PHP "postdays" Cross-Site Scripting Vulnerability

Info

PHPBB ViewTopic.PHP "postdays" Cross-Site Scripting Vulnerability

Bugtraq ID:	9865
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 13 2004 12:00AM
Updated:	Mar 13 2004 12:00AM
Credit:	Discovery is credited to JeiAr <[email protected]>.
Vulnerable:	phpBB Group phpBB 2.0.6 d phpBB Group phpBB 2.0.6 c phpBB Group phpBB 2.0.6 phpBB Group phpBB 2.0.5 phpBB Group phpBB 2.0.4 phpBB Group phpBB 2.0.3 phpBB Group phpBB 2.0.2 phpBB Group phpBB 2.0.1 phpBB Group phpBB 2.0 .0 phpBB Group phpBB 2.0 RC4 - Apache Apache 1.3.9 - Apache Apache 1.3.9 phpBB Group phpBB 2.0 RC3 - Apache Apache 1.3.9 - Apache Apache 1.3.9 phpBB Group phpBB 2.0 RC2 - Apache Apache 1.3.9 - Apache Apache 1.3.9 phpBB Group phpBB 2.0 RC1 - Apache Apache 1.3.9 - Apache Apache 1.3.9

Not Vulnerable:	phpBB Group phpBB 2.0.7

Discussion

PHPBB ViewTopic.PHP "postdays" Cross-Site Scripting Vulnerability

It has been reported that one of the scripts included with phpBB is prone to a cross-site scripting vulnerability. According to the author of the report, the script "viewtopic.php" returns the value of the HTML variable "postdays" to the client as its output without encoding it or otherwise removing potentially hostile content. This can be exploited by constructing malicious links with the malicious "postdays" variable value embedded as a GET request style HTML variable. If the target user visits such a link, the malicious, externally created content supplied in the link will be rendered (or executed, in the case of script code) as part of the viewtopic.php document and within the context of the vulnerable website (including the phpBB forum).