CVE-2005-1193

CVE-2005-1193 describes a cross-site scripting (XSS) vulnerability in phpBB versions prior to 2.0.15, specifically within the bbencode_second_pass and make_clickable functions in bbcode.php. This flaw allows remote attackers to inject and execute arbitrary script by crafting BBcode tags with malicious URI schemes like javascript: or script:. The vulnerability carries a CVSS score of 7.5, indicating high severity. It is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an exploit for this vulnerability is available on ExploitDB. Despite its age and the availability of exploit code, there is minimal community discussion or media coverage surrounding this CVE.