CVE-2004-1822

Опубликовано: 15 мар. 2004

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_REFERER parameter to login.php, (2) HTTP_REFERER parameter to register.php, or (3) target parameter to profile.php.

Ссылки

http://marc.info/?l=bugtraq&m=107939479713136&w=2
http://phorum.org/changelog.txt
Vendor Advisory
http://secunia.com/advisories/11157
Patch
Vendor Advisory
http://securitytracker.com/id?1009433
http://www.osvdb.org/4333
http://www.osvdb.org/4334
http://www.osvdb.org/4335
http://www.securityfocus.com/bid/9882
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15494
http://marc.info/?l=bugtraq&m=107939479713136&w=2
http://phorum.org/changelog.txt
Vendor Advisory
http://secunia.com/advisories/11157
Patch
Vendor Advisory
http://securitytracker.com/id?1009433
http://www.osvdb.org/4333
http://www.osvdb.org/4334
http://www.osvdb.org/4335
http://www.securityfocus.com/bid/9882
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15494

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phorum:phorum:3.1:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.1.1_pre:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.1.1_rc2:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.1.1a:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.1.2:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.2:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.2.2:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.2.3:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.2.3a:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.2.3b:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.2.4:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.2.5:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.2.6:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.2.7:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.2.8:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.3.1:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.3.1a:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.3.2:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.3.2a:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.3.2b3:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.4:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.4.1:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.4.2:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.4.3:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.4.4:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.4.5:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:3.4.6:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01301

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-gc9v-mv77-jhqh

github

больше 3 лет назад