CVE-2008-4513

Cross-site scripting XSS vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags...

Cross site scripting

Cross-site scripting XSS vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags...

CVE-2008-4513

Cross-site scripting XSS vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags...

CVE-2008-4513

CVE-2008-4513 describes a cross-site scripting (XSS) vulnerability in the BBcode API module of Phorum 5.2.8. The issue allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags. This is documented in multiple sources (NVD entry and related CVE records). The provi...

CVE-2008-4513: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags...

Phorum cross-site scripting vulnerability

Overview Phorum, an open source message board system, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution None...

Sql injection

SQL injection vulnerability in Phorum before 5.2.6, when mysqluseft is disabled, allows remote attackers to execute arbitrary SQL commands via the non-fulltext search...

CVE-2008-1486

SQL injection vulnerability in Phorum before 5.2.6, when mysqluseft is disabled, allows remote attackers to execute arbitrary SQL commands via the non-fulltext search...

CVE-2008-1486

SQL injection vulnerability in Phorum before 5.2.6, when mysqluseft is disabled, allows remote attackers to execute arbitrary SQL commands via the non-fulltext search...

CVE-2008-1486

Phorum vulnerability CVE-2008-1486 affects Phorum before version 5.2.6. When mysql_use_ft is disabled, an attacker can perform SQL injection through the non-fulltext search, enabling arbitrary SQL commands on the backend. The CVSS-derived assessment in the connected records cites network access w...

CVE-2008-1486: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Phorum before 5.2.6, when mysqluseft is disabled, allows remote attackers to execute arbitrary SQL commands via the non-fulltext search...

CVE-2002-2340

The vulnerability CVE-2002-2340 affects Phorum 3.3.2a, specifically the read.php component. The issue is a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via (1) the t parameter or (2) the body of an email response. The public descript...

CVE-2002-2340

Cross-site scripting XSS vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via 1 the t parameter or 2 the body of an email response...

CVE-2002-2340: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via 1 the t parameter or 2 the body of an email response...

CVE-2003-1467

CVE-2003-1467 covers multiple XSS flaws in Phorum prior to 3.4.3 affecting login.php, register.php, post.php, and common.php. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Affected software: Phorum (before 3.4.3). Underlying cause an...

CVE-2003-1487

Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the 1 UserAdmin program, 2 Edit user profile, or 3 stats program...

CVE-2003-1465

Phorum 3.4–3.4.2 is affected by a directory traversal in download.php that allows remote attackers to read arbitrary files. The vulnerability arises from improper handling of file paths, enabling access to sensitive server files. No remediation or patch details are provided in the supplied docume...

CVE-2003-1486

CVE-2003-1486 affects Phorum 3.4 to 3.4.2. An incorrect HTTP request to one of nine scripts (smileys.php, quick_listrss.php, purge.php, news.php, memberlist.php, forum_listrss.php, forum_list_rdf.php, forum_list.php, move.php) can make the server leak its full path in an error message. This is a ...

CVE-2003-1466

CVE-2003-1466 affects Phorum 3.4–3.4.2. Unspecified vulnerability allows remote attackers to use Phorum as a proxy to other sites via (1) register.php or (2) login.php, enabling potential abuse of the application as a gateway to external hosts. The provided documents do not include concrete explo...

CVE-2003-1486

Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an incorrect HTTP request to 1 smileys.php, 2 quicklistrss.php, 3 purge.php, 4 news.php, 5 memberlist.php, 6 forumlistrss.php, 7 forumlistrdf.php, 8 forumlist.php, or 9 move.php, which leaks the...