CVE-2011-3768

Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files...

Information disclosure

Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files...

CVE-2011-3768

Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files...

CVE-2011-3768

CVE-2011-3768 concerns Phorum 5.2.15a. The vulnerability is an information disclosure where remote attackers can obtain the installation path by making a direct request to a PHP file, with the path exposed in an error message (e.g., via css.php and related files). The connected documents confirm ...

CVE-2011-3768

Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files...

CVE-2011-3768: Exposure of Sensitive Information to an Unauthorized Actor

Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files...

PT-2011-4658

Name of the Vulnerable Software and Affected Versions Phorum version 5.2.15a Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as css.php, which reveals the installation path in an error...

Phorum 5.2.x < 5.2.17 'control.php' 'real_name' XSS

According to its self-reported version number, the instance of Phorum 5.2.x hosted on the remote website is earlier than 5.2.17 and therefore may be affected by a cross-site scripting vulnerability. The parameter 'realname' is not properly sanitized by the script 'control.php' before it is passed...

Phorum < 5.2.17 XSS Vulnerability

Phorum is prone to a cross-site scripting XSS vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Phorum < 5.2.16 Multiple Vulnerabilities

Phorum is prone to cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Phorum 'real_name' Parameter Cross-Site Scripting Vulnerability

This host is running Phorum and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbphorumxssvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Phorum 'realname' Parameter Cross-Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks...

Phorum Cross-Site Scripting and Cross-site request forgery Vulnerabilities

This host is running Phorum and is prone to cross-site scripting and cross-site request forgery vulnerabilities. OpenVAS Vulnerability Test $Id: gbphorumxssncsrfvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Phorum Cross-Site Scripting and Cross-site request forgery Vulnerabilities Authors: Madhuri...

CVE-2011-3392

Cross-site scripting XSS vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the realname parameter...

CVE-2011-3381

Cross-site request forgery CSRF vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-3382

Cross-site scripting XSS vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the realname parameter...

CVE-2011-3381

Cross-site request forgery CSRF vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-3381

Phorum is vulnerable to CSRF in all versions before 5.2.16, enabling an attacker to hijack the session of a logged-in user (vector not disclosed in the initial entry). Connected sources specify additional risk of XSS and CSRF as part of multiple vulnerabilities, with impact including arbitrary fi...