Description
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_REFERER parameter to login.php, (2) HTTP_REFERER parameter to register.php, or (3) target parameter to profile.php.
Exploits (3)
References (9)
Core 9
Core References
Patch, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/9882
Vendor Advisory x_refsource_confirm
http://phorum.org/changelog.txt
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=107939479713136&w=2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/4334
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/4335
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/15494
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/11157
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1009433
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/4333
Scores
EPSS
0.0143
EPSS Percentile
80.8%
Details
Status
published
Products (29)
phorum/phorum
3.1
phorum/phorum
3.1.1
phorum/phorum
3.1.1_pre
phorum/phorum
3.1.1_rc2
phorum/phorum
3.1.1a
phorum/phorum
3.1.2
phorum/phorum
3.2
phorum/phorum
3.2.2
phorum/phorum
3.2.3
phorum/phorum
3.2.3a
... and 19 more
Published
Mar 15, 2004
Tracked Since
Feb 18, 2026