Lucene search
HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-2242
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.003
Percentile
70.9%
Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and earlier, allows remote attackers to inject arbitrary HTML or web script via the subject parameter.
Affected configurations
Node
phorumphorumMatch5.0.7_beta
Related
nessus
nessus
Phorum search.php subject Parameter XSS
2004-08-02 00:00:00
cve
cve
CVE-2004-2242
2005-07-17 04:00:00
cvelist
cvelist
CVE-2004-2242
2005-07-17 04:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.003
Percentile
70.9%
Related for NVD:CVE-2004-2242