Page 3 of 23 results (0.003 seconds)

CVSS: 6.1EPSS: 0%CPEs: 42EXPL: 1

CVE-2005-2836

https://notcve.org/view.php?id=CVE-2005-2836

07 Sep 2005 — Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to register.php or (2) a signature of a logged-in user in "My Control Center," which is not properly handled by control.php. • http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0018.html •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2005-0784

https://notcve.org/view.php?id=CVE-2005-0784

20 Mar 2005 — Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control panel. • http://marc.info/?l=bugtraq&m=111083279031544&w=2 •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 2

CVE-2005-0783 – Phorum 5.0.14 - Multiple Subject and Attachment HTML Injection Vulnerabilities

https://notcve.org/view.php?id=CVE-2005-0783

20 Mar 2005 — Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached file. • https://www.exploit-db.com/exploits/25223 •