472 matches found
CVE-2004-1822
CVE-2004-1822 affects Phorum 3.1–5.0.3 beta and involves multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via (1) the HTTP_REFERER parameter to login.php, (2) the HTTP_REFERER parameter to register.php, or (3) the target...
CVE-2005-0784
Multiple cross-site scripting XSS vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via 1 the subject line to follow.php or 2 the subject line in the user's personal control panel...
CVE-2005-0783
Cross-site scripting XSS vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached file...
CVE-2005-0843
CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header...
CVE-2005-0843
CVE-2005-0843 : In Phorum 5.0.14a, the file search.php is vulnerable to a CRLF injection via the body parameter, which is included in the HTTP Location header. This allows remote attackers to perform HTTP response splitting. The issue is documented in multiple sources (NVD entry for CVE-2005-0843...
phorumSplit.txt
Positive Technologies SA-20050322 Phorum "location" HTTP Response Splitting Vulnerability. Release Date: 03/22/2005 Date Reported: 03/10/2005 Severity: Medium Application: Phorum Platform: PHP Vendor: http://www.phorum.org Affects versions: 5.0.14a Other versions may also be affected. I. BACKGROU...
[ Positive Technologies #SA] Phorum "location" HTTP Response Splitting Vulnerability
Positive Technologies SA-20050322 Phorum "location" HTTP Response Splitting Vulnerability. Release Date: 03/22/2005 Date Reported: 03/10/2005 Severity: Medium Application: Phorum Platform: PHP Vendor: http://www.phorum.org Affects versions: 5.0.14a Other versions may also be affected. I. BACKGROU...
Phorum 3.x/5.0.x - HTTP Response Splitting
source: https://www.securityfocus.com/bid/12869/info A remote HTTP response splitting vulnerability reportedly affects Phorum. This issue is due to a failure of the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent...
Phorum 3.x5.0.x - HTTP Response Splitting
Phorum 3.x5.0.x - HTTP Response Splitting source: https://www.securityfocus.com/bid/12869/info A remote HTTP response splitting vulnerability reportedly affects Phorum. This issue is due to a failure of the application to properly sanitize user-supplied input. A remote attacker may exploit this...
Phorum search.php location Parameter HTTP Response Splitting
The version of Phorum installed on the remote host does not properly sanitize input used in the Location response header. An attacker can exploit this flaw with a specially crafted request to inject malicious code into HTTP headers, which may allow execution of arbitrary HTML and script code in a...
CVE-2005-0783
CVE-2005-0783 : Cross-site scripting in Phorum prior to 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached file. Affected software is Phorum (before 5.0.14a); the vulnerability is triggered when handling file attachments. The provided documents ...
CVE-2005-0783
Cross-site scripting XSS vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached file...
CVE-2005-0784
CVE-2005-0784 affects Phorum before 5.0.15, where multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The issue is triggered via the subject line in follow.php or in the user’s personal control panel, stemming from failure to properly...
CVE-2005-0784
Multiple cross-site scripting XSS vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via 1 the subject line to follow.php or 2 the subject line in the user's personal control panel...
Phorum < 5.0.15 Multiple XSS
The version of Phorum installed on the remote host is prone to multiple cross-site scripting vulnerabilities due to its failure to sanitize user input. An attacker can exploit these flaws to potentially cause arbitrary script and HTML code to be rendered by a user's browser in the context of the...
Phorum Detection
The remote host is running Phorum, a web-based message board written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17349; scriptversion"1.19"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Phorum Detection";...
3 XSS Vulnerabilities in Phorum <= 5.0.14
Author: Jon Oberheide [email protected] Date: Sat, March 12th, 2005 Summary ======= Application: Phorum Vendor Website: http://www.phorum.org Affected Versions: = 5.0.14 Type of Vulnerability: Cross Site Scripting XSS About Phorum ============ Phorum is a web based message board written in PHP...
Phorum < 5.0.15 HTML Injection
Binary data 2705.prm...
Phorum 5.0.14 - Multiple Subject and Attachment HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/12800/info Phorum is reportedly affected by multiple HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. The attacker-supplied HTML...
Phorum 5.0.14 - Multiple Subject and Attachment HTML Injection Vulnerabilities
Phorum 5.0.14 - Multiple Subject and Attachment HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/12800/info Phorum is reportedly affected by multiple HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied inp...