Security Advisory
CVE-2004-2130
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the (1) folder or (2) mode variables.