CVE-2002-2340

Cross-site scripting XSS vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via 1 the t parameter or 2 the body of an email response...

Phorum 3.3.2a has another bug for remote command execution

Target: Phorum 3.3.2a maybee older Description: Phorum 3.3.2a let's remote users execute arbitary code Found by: Markus [email protected] Vendor: http://www.phorum.org Notified Vendor: Yes, already fixed in 3.3.2b Details: Another bug for remote command execution. This time it's...