Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0784
cve
2005
0784
xss
vulnerabilities
phorum
web script
html
follow.php
personal control panel
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.0%
Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user’s personal control panel.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phorum:phorum | phorum | eq | 5.0.14 |
Related
cvelist
cvelist
CVE-2005-0784
2005-03-20 05:00:00
nessus
nessus
Phorum < 5.0.15 Multiple XSS
2005-03-17 00:00:00
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.0%
Related for CVE-2005-0784