Page 6 of 53 results (0.002 seconds)

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1

CVE-2005-0784

https://notcve.org/view.php?id=CVE-2005-0784

Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control panel. • http://marc.info/?l=bugtraq&m=111083279031544&w=2 http://secunia.com/advisories/14554 http://www.securityfocus.com/bid/12800 •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 2

CVE-2005-0783 – Phorum 5.0.14 - Multiple Subject and Attachment HTML Injection Vulnerabilities

https://notcve.org/view.php?id=CVE-2005-0783

Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached file. • https://www.exploit-db.com/exploits/25223 http://marc.info/?l=bugtraq&m=111083279031544&w=2 http://secunia.com/advisories/14554 http://www.securityfocus.com/bid/12800 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 3

CVE-2004-2240

https://notcve.org/view.php?id=CVE-2004-2240

Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via (1) the query string in read.php or (2) unknown vectors in file.php. • http://phorum.org/cvs-changelog-5.txt http://secunia.com/advisories/12980 http://securitytracker.com/id?1011921 http://www.maxpatrol.com/advdetails.asp?id=15 http://www.maxpatrol.com/mp_advisory.asp http://www.osvdb.org/11129 http://www.securityfocus.com/bid/11538 https://exchange.xforce.ibmcloud.com/vulnerabilities/17847 •

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0

CVE-2004-2243

https://notcve.org/view.php?id=CVE-2004-2243

Phorum allows remote attackers to hijack sessions of other users by stealing and replaying the session hash in the phorum_uriauth parameter, as demonstrated using profile.php. NOTE: the affected version was reported to be 4.3.7, but this may be erroneous. • http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0999.html http://securitytracker.com/id?1010219 https://exchange.xforce.ibmcloud.com/vulnerabilities/16215 •

CVSS: 4.6EPSS: 0%CPEs: 6EXPL: 2

CVE-2004-1518

https://notcve.org/view.php?id=CVE-2004-1518

SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter. • http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028609.html http://marc.info/?l=bugtraq&m=110021385926870&w=2 http://secunia.com/advisories/13174 http://www.securityfocus.com/bid/11660 https://exchange.xforce.ibmcloud.com/vulnerabilities/18045 •