CVE-2004-1809 - Lichenous Respects

Description

Cross-site scripting (XSS) vulnerability in phpBB 2.0.6d and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) postdays parameter to viewtopic.php or (2) topicdays parameter to viewforum.php.

Reference

http://www.phpbb.com/support/documents.php?mode=changelog#206 http://www.securityfocus.com/bid/9865 http://www.securityfocus.com/bid/9866 http://www.osvdb.org/4257 http://www.osvdb.org/4259 http://secunia.com/advisories/11121 http://marc.info/?l=bugtraq&m=107920498205324&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/15464