VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published May 2, 2005· Updated Apr 16, 2026

CVE-2005-1113

CVE-2005-1113

Description

Multiple cross-site scripting (XSS) vulnerabilities in PhpBB Plus 1.52 and earlier allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) groupcp.php, (2) index.php, (3) portal.php, (4) viewforum.php, or (5) viewtopic.php, (6) the c parameter to index.php, or (7) the article parameter to portal.php.

Affected products

3
  • PhpBB/Phpbb Plus3 versions
    cpe:2.3:a:phpbb_group:phpbb_plus:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:phpbb_group:phpbb_plus:*:*:*:*:*:*:*:*range: <=1.52
    • cpe:2.3:a:phpbb_group:phpbb_plus:1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:phpbb_group:phpbb_plus:1.51:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.