CVE:CVE-2004-0730
CNNVD:CNNVD-200407-068
PhpBB 2.0.8版本存在多个跨站脚本攻击(XSS)漏洞。远程攻击者借助（1）index.php的cat_title参数，（2）可从faq.php的lang_faq.php中faq[0][0]参数，或（3）可从faq.php的lang_bbcode.php中faq[0][0]参数注入任意web脚本或HTML。
solution:Upgrade phpbb_group phpbb to a higher version than 2.0.8,2.0.8a,and avoid the version 2.0.8,2.0.8a