CVE ID:	CVE-2004-0730
Description:	Multiple cross-site scripting (XSS) vulnerabilities in PhpBB 2.0.8 allow remote attackers to inject arbitrary web script or HTML via (1) the cat_title parameter in index.php, (2) the faq[0][0] parameter in lang_faq.php as accessible from faq.php, or (3) the faq[0][0] parameter in lang_bbcode.php as accessible from faq.php.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0730 BugTraq ID: 10738 http://www.securityfocus.com/bid/10738 Bugtraq: 20040716 [waraxe-2004-SA#034 - XSS and path full path disclosure in PhpBB 2.0.8] (Google Search) http://marc.info/?l=bugtraq&m=108999024506020&w=2 http://www.waraxe.us/index.php?modname=sa&id=34 XForce ISS Database: phpbb-indexphp-xss(16724) https://exchange.xforce.ibmcloud.com/vulnerabilities/16724 XForce ISS Database: phpbb-lang-bbcode-xss(16726) https://exchange.xforce.ibmcloud.com/vulnerabilities/16726 XForce ISS Database: phpbb-lang-faq-xss(16725) https://exchange.xforce.ibmcloud.com/vulnerabilities/16725