Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2015-1431

Published: 10 February 2015

Cross-site scripting (XSS) vulnerability in includes/startup.php in phpBB before 3.0.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to "Relative Path Overwrite."

Priority

Medium

Status

Package Release Status
phpbb3
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

lucid Ignored
(end of life)
precise Ignored
(end of life)
trusty
Released (3.0.12-1ubuntu0.1~esm1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
upstream
Released (3.0.12-4)
utopic Ignored
(end of life)
vivid Not vulnerable
(3.0.12-4)
wily Not vulnerable
(3.0.12-4)
xenial Not vulnerable
(3.0.12-4)
yakkety Does not exist

zesty Does not exist