CVE-2011-3382

Cross-site scripting XSS vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3381

Cross-site request forgery CSRF vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-3382

CVE-2011-3382 affects Phorum prior to 5.2.16 with a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary script or HTML via unspecified vectors. Public sources in connected docs identify Phorum 5.x as affected and repeatedly emphasize updating to the late...

CVE-2011-3381

Phorum is vulnerable to CSRF in all versions before 5.2.16, enabling an attacker to hijack the session of a logged-in user (vector not disclosed in the initial entry). Connected sources specify additional risk of XSS and CSRF as part of multiple vulnerabilities, with impact including arbitrary fi...

CVE-2011-3392

Cross-site scripting XSS vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the realname parameter...

CVE-2011-3392: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the realname parameter...

PT-2011-4426

Name of the Vulnerable Software and Affected Versions Phorum versions prior to 5.2.17 Description The issue allows remote attackers to inject arbitrary web script or HTML via the real name parameter in the control.php file of the controlcenter. This can lead to cross-site scripting XSS attacks...

CVE-2011-3381: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2011-4417

Name of the Vulnerable Software and Affected Versions Phorum versions prior to 5.2.16 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 5.2.16, update to version 5.2.16 or later to resolve the issue...

PT-2011-4416

Name of the Vulnerable Software and Affected Versions Phorum versions prior to 5.2.16 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified. Recommendations For versions prior to...

CVE-2011-3382: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Multiple vulnerabilities in Phorum

Overview Phorum contains multiple vulnerabilities. Phorum is a message board software. Phorum contains cross-site request forgery and cross-site scripting vulnerabilities. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

JVN#71435255: Multiple vulnerabilities in Phorum

Phorum is a message board software. Phorum contains cross-site request forgery and cross-site scripting vulnerabilities. Impact An arbitrary file may be uploaded or an arbitrary script may be executed on the web browser of a user that is logged in. Solution Update the software Update to the lates...

Phorum Cross-Site Scripting Vulnerability

This host is running Phorum and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodphorumxssvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Phorum Cross-Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod, http://www.secpod.com This...

Phorum 'feed.php' Security Bypass Vulnerability

This host is running phpBB and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodphpbbsecbypassvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ phpBB 'feed.php' Security Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod, http://www.secpod.com...

Phorum < 5.2.15 XSS Vulnerability

Phorum is prone to a cross-site scripting XSS vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

CVE-2010-1629

Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...

Cross site scripting

Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...

CVE-2010-1629

Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...

CVE-2010-1629

Affected software: Phorum (PHP-based forum software). Vulnerability: Cross-site scripting (XSS) in Phorum before 5.2.15 that allows remote attackers to inject arbitrary web script or HTML via an invalid email address. Impact (per sources): XSS could affect users viewing manipulated inputs; exact ...