CVE-2005-3418

Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to usercp_register.php, (2) forward_page parameter to login.php, and (3) list_cat parameter to search.php, which are not initialized as variables.

• http://marc.info/?l=bugtraq&m=113081113317600&w=2
• http://secunia.com/advisories/17366
• http://secunia.com/advisories/18098
• http://securityreason.com/securityalert/130
• http://securitytracker.com/id?1015121Patch, Vendor Advisory
• http://www.debian.org/security/2005/dsa-925
• http://www.hardened-php.net/advisory_172005.75.htmlPatch, Vendor Advisory
• http://www.osvdb.org/20387Patch
• http://www.osvdb.org/20388Patch
• http://www.osvdb.org/20389Patch
• http://www.securityfocus.com/bid/15243Patch
• http://www.vupen.com/english/advisories/2005/2250
• http://marc.info/?l=bugtraq&m=113081113317600&w=2
• http://secunia.com/advisories/17366
• http://secunia.com/advisories/18098
• http://securityreason.com/securityalert/130
• http://securitytracker.com/id?1015121Patch, Vendor Advisory
• http://www.debian.org/security/2005/dsa-925
• http://www.hardened-php.net/advisory_172005.75.htmlPatch, Vendor Advisory
• http://www.osvdb.org/20387Patch
• http://www.osvdb.org/20388Patch
• http://www.osvdb.org/20389Patch
• http://www.securityfocus.com/bid/15243Patch
• http://www.vupen.com/english/advisories/2005/2250

Published

Nov 1, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3412Cross-site scripting (XSS) vulnerability in Elite Forum 1.0.…
• CVE-2005-3413Cross-site scripting (XSS) vulnerability in desktop.php in e…
• CVE-2005-3414eyeOS 0.8.4 stores usrinfo.xml under the web document root w…
• CVE-2005-3415phpBB 2.0.17 and earlier allows remote attackers to bypass p…
• CVE-2005-3416phpBB 2.0.17 and earlier, when register_globals is enabled a…
• CVE-2005-3417phpBB 2.0.17 and earlier, when the register_long_arrays dire…
• CVE-2005-3419SQL injection vulnerability in usercp_register.php in phpBB …
• CVE-2005-3420usercp_register.php in phpBB 2.0.17 allows remote attackers …
• CVE-2005-3421estcmd in Hyper Estraier 1.0.1 on Windows systems allows rem…
• CVE-2005-3422Cross-site scripting (XSS) vulnerability in error.asp in ASP…
• CVE-2005-3423Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 a…
• CVE-2005-3424Cross-site scripting (XSS) vulnerability in GNUMP3D before 2…