• info
• discussion
• exploit
• solution
• references

phpBB Privmsg.PHP HTML Injection Vulnerability

Solution:
The vendor has released version 2.0.22 to address this issue; please see the reference section for details.


phpBB phpBB 2.0.21

• phpBB phpBB-2.0.22.tar.gz
  http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.22.tar.gz