CVE-2003-1467

Summary

Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/7572
• http://www.securityfocus.com/bid/7576
• http://www.securityfocus.com/bid/7573
• http://securityreason.com/securityalert/3288
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12502
• http://www.securityfocus.com/bid/7577
• http://www.securityfocus.com/bid/7584
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12487
• http://www.securityfocus.com/archive/1/321310

References

• http://www.securityfocus.com/bid/7572
• http://www.securityfocus.com/bid/7576
• http://www.securityfocus.com/bid/7573
• http://securityreason.com/securityalert/3288
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12502
• http://www.securityfocus.com/bid/7577
• http://www.securityfocus.com/bid/7584
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12487
• http://www.securityfocus.com/archive/1/321310

• ←Previous
• Next→