Lucene search
HistoryMay 19, 2010 - 10:30 p.m.
CVE-2010-1629
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
60.3%
Cross-site scripting (XSS) vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address.
Affected configurations
Node
phorumphorumRange≤5.2.14
ORphorumphorumMatch3.0.7
ORphorumphorumMatch3.1
ORphorumphorumMatch3.1.1
ORphorumphorumMatch3.1.1_pre
ORphorumphorumMatch3.1.1_rc2
ORphorumphorumMatch3.1.1a
ORphorumphorumMatch3.1.2
ORphorumphorumMatch3.2
ORphorumphorumMatch3.2.2
ORphorumphorumMatch3.2.3
ORphorumphorumMatch3.2.3a
ORphorumphorumMatch3.2.3b
ORphorumphorumMatch3.2.4
ORphorumphorumMatch3.2.5
ORphorumphorumMatch3.2.6
ORphorumphorumMatch3.2.7
ORphorumphorumMatch3.2.8
ORphorumphorumMatch3.3.1
ORphorumphorumMatch3.3.1a
ORphorumphorumMatch3.3.2
ORphorumphorumMatch3.3.2a
ORphorumphorumMatch3.3.2b3
ORphorumphorumMatch3.4
ORphorumphorumMatch3.4.1
ORphorumphorumMatch3.4.2
ORphorumphorumMatch3.4.3
ORphorumphorumMatch3.4.4
ORphorumphorumMatch3.4.5
ORphorumphorumMatch3.4.6
ORphorumphorumMatch3.4.7
ORphorumphorumMatch3.4.8
ORphorumphorumMatch3.4.8a
ORphorumphorumMatch4.3.7
ORphorumphorumMatch5.0.0_alpha
ORphorumphorumMatch5.0.1_alpha
ORphorumphorumMatch5.0.2_alpha
ORphorumphorumMatch5.0.3_beta
ORphorumphorumMatch5.0.4_beta
ORphorumphorumMatch5.0.4a_beta
ORphorumphorumMatch5.0.5_beta
ORphorumphorumMatch5.0.6_beta
ORphorumphorumMatch5.0.7_beta
ORphorumphorumMatch5.0.7a_beta
ORphorumphorumMatch5.0.8_rc
ORphorumphorumMatch5.0.9
ORphorumphorumMatch5.0.10
ORphorumphorumMatch5.0.11
ORphorumphorumMatch5.0.12
ORphorumphorumMatch5.0.13
ORphorumphorumMatch5.0.13a
ORphorumphorumMatch5.0.14
ORphorumphorumMatch5.0.14a
ORphorumphorumMatch5.0.15
ORphorumphorumMatch5.0.15a
ORphorumphorumMatch5.0.16
ORphorumphorumMatch5.0.17
ORphorumphorumMatch5.0.17a
ORphorumphorumMatch5.0.18
ORphorumphorumMatch5.0.19
ORphorumphorumMatch5.0.20
ORphorumphorumMatch5.1.13
ORphorumphorumMatch5.1.14
ORphorumphorumMatch5.1.17
ORphorumphorumMatch5.1.18
ORphorumphorumMatch5.1.20
ORphorumphorumMatch5.1.21
ORphorumphorumMatch5.1.25
ORphorumphorumMatch5.2
ORphorumphorumMatch5.2.1
ORphorumphorumMatch5.2.2beta
ORphorumphorumMatch5.2.3rc1
ORphorumphorumMatch5.2.4rc2
ORphorumphorumMatch5.2.5
ORphorumphorumMatch5.2.8
ORphorumphorumMatch5.2.9
ORphorumphorumMatch5.2.10
ORphorumphorumMatch5.2.10rc1
ORphorumphorumMatch5.2.11
ORphorumphorumMatch5.2.12
ORphorumphorumMatch5.2.12a
ORphorumphorumMatch5.2.13
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phorum | phorum | * | cpe:2.3:a:phorum:phorum:*:*:*:*:*:*:*:* |
| phorum | phorum | 3.0.7 | cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:* |
| phorum | phorum | 3.1 | cpe:2.3:a:phorum:phorum:3.1:*:*:*:*:*:*:* |
| phorum | phorum | 3.1.1 | cpe:2.3:a:phorum:phorum:3.1.1:*:*:*:*:*:*:* |
| phorum | phorum | 3.1.1_pre | cpe:2.3:a:phorum:phorum:3.1.1_pre:*:*:*:*:*:*:* |
| phorum | phorum | 3.1.1_rc2 | cpe:2.3:a:phorum:phorum:3.1.1_rc2:*:*:*:*:*:*:* |
| phorum | phorum | 3.1.1a | cpe:2.3:a:phorum:phorum:3.1.1a:*:*:*:*:*:*:* |
| phorum | phorum | 3.1.2 | cpe:2.3:a:phorum:phorum:3.1.2:*:*:*:*:*:*:* |
| phorum | phorum | 3.2 | cpe:2.3:a:phorum:phorum:3.2:*:*:*:*:*:*:* |
| phorum | phorum | 3.2.2 | cpe:2.3:a:phorum:phorum:3.2.2:*:*:*:*:*:*:* |
Related
openvas
openvas
Phorum < 5.2.15 XSS Vulnerability
2010-05-25 00:00:00
Phorum Cross-Site Scripting Vulnerability
2010-05-25 00:00:00
prion
prion
Cross site scripting
2010-05-19 22:30:00
cve
cve
CVE-2010-1629
2010-05-19 22:30:01
cvelist
cvelist
CVE-2010-1629
2010-05-19 22:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
60.3%
Related for NVD:CVE-2010-1629