EDB-29442

functional

phpBB 2.0.21 - 'privmsg.php' HTML Injection

view exploit source exploit_dbverifiedtype webappsauthor Dementialpublished 2007-01-11catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2006-6421USmedium6.0Exploit
Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan