CVE Vulnerabilities

CVE-2004-1822

Published: Mar 15, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_REFERER parameter to login.php, (2) HTTP_REFERER parameter to register.php, or (3) target parameter to profile.php.

Affected Software

Name Vendor Start Version End Version
Phorum Phorum 3.1 3.1
Phorum Phorum 3.1.1 3.1.1
Phorum Phorum 3.1.1_pre 3.1.1_pre
Phorum Phorum 3.1.1_rc2 3.1.1_rc2
Phorum Phorum 3.1.1a 3.1.1a
Phorum Phorum 3.1.2 3.1.2
Phorum Phorum 3.2 3.2
Phorum Phorum 3.2.2 3.2.2
Phorum Phorum 3.2.3 3.2.3
Phorum Phorum 3.2.3a 3.2.3a
Phorum Phorum 3.2.3b 3.2.3b
Phorum Phorum 3.2.4 3.2.4
Phorum Phorum 3.2.5 3.2.5
Phorum Phorum 3.2.6 3.2.6
Phorum Phorum 3.2.7 3.2.7
Phorum Phorum 3.2.8 3.2.8
Phorum Phorum 3.3.1 3.3.1
Phorum Phorum 3.3.1a 3.3.1a
Phorum Phorum 3.3.2 3.3.2
Phorum Phorum 3.3.2a 3.3.2a
Phorum Phorum 3.3.2b3 3.3.2b3
Phorum Phorum 3.4 3.4
Phorum Phorum 3.4.1 3.4.1
Phorum Phorum 3.4.2 3.4.2
Phorum Phorum 3.4.3 3.4.3
Phorum Phorum 3.4.4 3.4.4
Phorum Phorum 3.4.5 3.4.5
Phorum Phorum 3.4.6 3.4.6
Phorum Phorum 5.0.3_beta 5.0.3_beta

References