Page 7 of 55 results (0.008 seconds)

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0

CVE-2004-2243

https://notcve.org/view.php?id=CVE-2004-2243

Phorum allows remote attackers to hijack sessions of other users by stealing and replaying the session hash in the phorum_uriauth parameter, as demonstrated using profile.php. NOTE: the affected version was reported to be 4.3.7, but this may be erroneous. • http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0999.html http://securitytracker.com/id?1010219 https://exchange.xforce.ibmcloud.com/vulnerabilities/16215 •

CVSS: 4.6EPSS: 0%CPEs: 6EXPL: 2

CVE-2004-1518

https://notcve.org/view.php?id=CVE-2004-1518

SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter. • http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028609.html http://marc.info/?l=bugtraq&m=110021385926870&w=2 http://secunia.com/advisories/13174 http://www.securityfocus.com/bid/11660 https://exchange.xforce.ibmcloud.com/vulnerabilities/18045 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2004-2110

https://notcve.org/view.php?id=CVE-2004-2110

SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the hide_email parameter. • http://marc.info/?l=bugtraq&m=107487971405960&w=2 http://phorum.org •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 3

CVE-2004-2242 – Phorum 5.0.7 - Search Script Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2004-2242

Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and earlier, allows remote attackers to inject arbitrary HTML or web script via the subject parameter. • https://www.exploit-db.com/exploits/24331 http://phorum.org/cvs-changelog-5.txt http://securitytracker.com/id?1010787 http://www.securityfocus.com/bid/10822 https://exchange.xforce.ibmcloud.com/vulnerabilities/16831 •

CVSS: 4.3EPSS: 1%CPEs: 1EXPL: 1

CVE-2004-2241

https://notcve.org/view.php?id=CVE-2004-2241

Cross-site scripting (XSS) vulnerability in Phorum 5.0.11 and earlier allows remote attackers to inject arbitrary HTML or web script via search.php. NOTE: some sources have reported that the affected file is read.php, but this is inconsistent with the vendor's patch. • http://phorum.org/cvs-changelog-5.txt http://secunia.com/advisories/12980 http://securitytracker.com/id?1011921 http://www.securityfocus.com/bid/11538 https://exchange.xforce.ibmcloud.com/vulnerabilities/17846 •