Read the docs
TI-2005-03135 Aliases CVE-2005-3310GHSA-94qp-2fqg-7mc4

Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading…

Priority LOW 19Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows remote authenticated users to inject arbitrary web script or HTML via an HTML file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer, which renders malformed image types as HTML, enabling cross-site scripting (XSS) attacks. NOTE: it could be argued that this vulnerability is due to a design flaw in Internet Explorer (CVE-2005-3312) and the proper fix should be in that browser; if so, then this should not be treated as a vulnerability in phpBB.

Why it matters now

EPSS 0.0117 67th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*2.0.17VulnerablePhpbb Group
  • cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:* Versions 2.0.17 Vulnerable ·Phpbb Group

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2005-3310
  2. 2026-10-03 Alias added: GHSA-94qp-2fqg-7mc4

References

Exploit 1

Patch 1

Other 1

  • TI-2005-01974 PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier… CVSS 2.0HIGH 7.5
  • TI-2004-01193 viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter… CVSS 2.0HIGH 7.5
  • TI-2002-00458 db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute… CVSS 2.0HIGH 10.0
  • TI-2005-01131 The bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before… CVSS 2.0HIGH 7.5
  • TI-2002-02089 SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain… CVSS 2.0HIGH 10.0
  • TI-2007-01631 PHP remote file inclusion vulnerability in includes/usercp_register.php in phpBB 2.0.19… CVSS 2.0HIGH 10.0
See all 80 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences