CVE-2006-0063

Name	CVE-2006-0063
Description	Cross-site scripting (XSS) vulnerability in phpBB 2.0.19, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary web script or HTML via a permitted HTML tag with ' (single quote) characters and active attributes such as onmouseover, a variant of CVE-2005-4357.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
phpbb2	source	(unstable)	2.0.21-1	unimportant

Notes

[sarge] - phpbb2 <no-dsa> (Affects only an inherently unsafe option only suitable for trusted users)
According to the maintainer only affects a config option that is strongly
discouraged due to potential security problems
(Upstream fix was in 2.0.20.)