CVE:CVE-2006-1603
CNNVD:CNNVD-200604-034
phpBB 2.0.19的profile.php存在跨站脚本漏洞，可让远程攻击者通过cur_password参数注入任意Web脚本或HTML。
solution:Upgrade phpbb_group phpbb to a higher version than 2.0.19,and avoid the version 2.0.19