ID de Prueba:	1.3.6.1.4.1.25623.1.0.20379
Categoría:	Web application abuses
Título:	phpBB <= 2.0.18 Multiple Cross-Site Scripting Flaws
Resumen:	The remote web server contains a PHP application that is affected by; several flaws.;; Description :;; According to its version number, the remote version of this software; is vulnerable to Javascript injection issues using 'url' bbcode tags; and, if HTML tags are enabled, HTML more generally.
Descripción:	Summary: The remote web server contains a PHP application that is affected by several flaws. Description : According to its version number, the remote version of this software is vulnerable to Javascript injection issues using 'url' bbcode tags and, if HTML tags are enabled, HTML more generally. Vulnerability Impact: This may allow an attacker to inject hostile Javascript into the forum system, to steal cookie credentials or misrepresent site content. When the form is submitted the malicious Javascript will be incorporated into dynamically generated content. Solution: Upgrade to phpBB version 2.0.19 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Copyright	Copyright (C) 2006 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.