Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

phpbb2: missing input sanitizing

Package(s):

phpbb2

CVE #(s):

CVE-2006-1896

Created:

May 22, 2006

Updated:

February 11, 2008

Description:

It was discovered that phpbb2, a web based bulletin board, insufficiently sanitizes values passed to the "Font Color 3" setting, which might lead to the execution of injected code by admin users.

Alerts:

Debian

DSA-1066-1

2006-05-20

(Log in to post comments)