Description

Cross-site scripting (XSS) vulnerability in includes/startup.php in phpBB before 3.0.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to "Relative Path Overwrite."

Remediation

References

CVE-2015-1431

Related Vulnerabilities

PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-19520)

WordPress Plugin FeedList 'handler_image.php' Cross-Site Scripting (2.61.01)

Artifactory Incorrect Default Permissions Vulnerability (CVE-2021-46270)

MySQL CVE-2016-0654 Vulnerability (CVE-2016-0654)

WordPress Plugin WP Database Backup Cross-Site Scripting (5.1.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2015-1431