Vulnerability Details CVE-2002-0902
Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.082
EPSS Ranking 91.8%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2002-0902
-
cpe:2.3:a:phpbb_group:phpbb:2.0.0
-
cpe:2.3:a:phpbb_group:phpbb:2.0_beta1
-
cpe:2.3:a:phpbb_group:phpbb:2.0_rc1
-
cpe:2.3:a:phpbb_group:phpbb:2.0_rc2
-
cpe:2.3:a:phpbb_group:phpbb:2.0_rc3
-
cpe:2.3:a:phpbb_group:phpbb:2.0_rc4