Description

Cross-site scripting (XSS) vulnerability in includes/startup.php in phpBB before 3.0.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to "Relative Path Overwrite."

Remediation

References

CVE-2015-1431

Related Vulnerabilities

WordPress Plugin Qards Cross-Site Scripting (1.4.3)

WordPress Plugin CBX Bookmark & Favorite Cross-Site Scripting (1.6.8)

WordPress Plugin WP-Polls SQL Injection (2.71)

Liferay Portal Incorrect Authorization Vulnerability (CVE-2024-38002)

WordPress Plugin Contact Form Email Cross-Site Scripting (1.1.49)

Severity

Medium

Classification

CVE-2015-1431 CWE-707

Tags

Missing Update Known Vulnerabilities