Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3382

CVE-2011-3382 affects Phorum prior to 5.2.16 with a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary script or HTML via unspecified vectors. Public sources in connected docs identify Phorum 5.x as affected and repeatedly emphasize updating to the late...

CVE-2011-3392

Cross-site scripting XSS vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the realname parameter...

CVE-2011-3392

Summary: CVE-2011-3392 is a cross-site scripting (XSS) vulnerability in Phorum 5.2.x prior to 5.2.17. The flaw resides in the control.php script within the controlcenter, where the real_name parameter is not properly sanitized, allowing an attacker to inject arbitrary HTML/JavaScript into a user’...

CVE-2011-3381

Phorum is vulnerable to CSRF in all versions before 5.2.16, enabling an attacker to hijack the session of a logged-in user (vector not disclosed in the initial entry). Connected sources specify additional risk of XSS and CSRF as part of multiple vulnerabilities, with impact including arbitrary fi...

CVE-2011-3382

Cross-site scripting XSS vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3381

Cross-site request forgery CSRF vulnerability in Phorum before 5.2.16 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Multiple vulnerabilities in Phorum

Overview Phorum contains multiple vulnerabilities. Phorum is a message board software. Phorum contains cross-site request forgery and cross-site scripting vulnerabilities. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

JVN#71435255: Multiple vulnerabilities in Phorum

Phorum is a message board software. Phorum contains cross-site request forgery and cross-site scripting vulnerabilities. Impact An arbitrary file may be uploaded or an arbitrary script may be executed on the web browser of a user that is logged in. Solution Update the software Update to the lates...

Phorum Cross-Site Scripting Vulnerability

This host is running Phorum and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodphorumxssvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Phorum Cross-Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod, http://www.secpod.com This...

Phorum 'feed.php' Security Bypass Vulnerability

This host is running phpBB and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodphpbbsecbypassvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ phpBB 'feed.php' Security Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod, http://www.secpod.com...

Phorum < 5.2.15 XSS Vulnerability

Phorum is prone to a cross-site scripting XSS vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

CVE-2010-1629

Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...

Cross site scripting

Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...

CVE-2010-1629

Affected software: Phorum (PHP-based forum software). Vulnerability: Cross-site scripting (XSS) in Phorum before 5.2.15 that allows remote attackers to inject arbitrary web script or HTML via an invalid email address. Impact (per sources): XSS could affect users viewing manipulated inputs; exact ...

CVE-2010-1629

Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...

Phorum过滤引擎HTML代码注入漏洞

BUGTRAQ: 35777 Phorum是一款基于PHP的WEB论坛程序，可在Linux和Unix操作系统下使用，也可在Microsoft Windows操作系统下使用。 Phorum的过滤引擎没有充分地验证某些BBcode参数，远程攻击者可以在所提交的请求中使用导致注入并执行恶意JavaScript代码。 Phorum 5.2.11 厂商补丁： Phorum ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.phorum.org/phorum5/read.php?64,139411...

Phorum Multiple BBCode HTML Injection Vulnerabilities

Phorum is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie- based authentication credentials and...

Phorum < 5.2.12a Multiple BBCode HTML Injection Vulnerabilities

Phorum is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...