CVE-2002-0902

Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script.

• http://online.securityfocus.com/archive/1/274273
• http://www.iss.net/security_center/static/9178.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/4858Exploit, Patch, Vendor Advisory
• http://online.securityfocus.com/archive/1/274273
• http://www.iss.net/security_center/static/9178.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/4858Exploit, Patch, Vendor Advisory

Published

Oct 4, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0896The throttle capability in Swatch may fail to report certain…
• CVE-2002-0897LocalWEB2000 2.1.0 web server allows remote attackers to byp…
• CVE-2002-0898Opera 6.0.1 and 6.0.2 allows a remote web site to upload arb…
• CVE-2002-0899Falcon web server 2.0.0.1021 and earlier allows remote attac…
• CVE-2002-0900Buffer overflow in pks PGP public key web server before 0.9.…
• CVE-2002-0901Multiple buffer overflows in Advanced Maryland Automatic Net…
• CVE-2002-0903register.php for WoltLab Burning Board (wbboard) 1.1.1 uses …
• CVE-2002-0904SayText function in Kismet 2.2.1 and earlier allows remote a…
• CVE-2002-0905Buffer overflow in sqlexec for Informix SE-7.25 allows local…
• CVE-2002-0906Buffer overflow in Sendmail before 8.12.5, when configured t…
• CVE-2002-0907Buffer overflow in SHOUTcast 1.8.9 and other versions before…
• CVE-2002-0908Directory traversal vulnerability in the web server for Cisc…