CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2011-3622
https://notcve.org/view.php?id=CVE-2011-3622
A Cross-Site Scripting (XSS) vulnerability exists in the admin login screen in Phorum before 5.2.18. Se presenta una vulnerabilidad de Cross-Site Scripting (XSS) en la pantalla de inicio de sesión del administrador en Phorum versiones anteriores a 5.2.18. • https://www.openwall.com/lists/oss-security/2011/10/18/9 https://www.phorum.org/phorum5/read.php?64%2C149588 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 21EXPL: 0CVE-2012-6659
https://notcve.org/view.php?id=CVE-2012-6659
Cross-site scripting (XSS) vulnerability in the admin interface in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Vulnerabilidad de XSS en la interfaz de administración en Phorum anterior a 5.2.19 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada. • http://secunia.com/advisories/50445 http://www.phorum.org/phorum5/read.php?64%2C151943 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 13EXPL: 5CVE-2012-4234 – Phorum 5.2.18 - Multiple Cross-Site Scripting Vulnerabilities
https://notcve.org/view.php?id=CVE-2012-4234
Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via the group parameter. Vulnerabilidad de XSS en la pantalla de la moderación de grupos en el centro de control (control.php) en Phorum anterior a 5.2.19 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro group. Phorum version 5.2.18 suffers from a cross site scripting vulnerability. • https://www.exploit-db.com/exploits/37683 http://archives.neohapsis.com/archives/bugtraq/2012-08/0189.html http://packetstormsecurity.org/files/116057/Phorum-5.2.18-Cross-Site-Scripting.html http://secunia.com/advisories/50445 http://www.phorum.org/phorum5/read.php?64%2C151943 http://www.securityfocus.com/bid/55275 https://exchange.xforce.ibmcloud.com/vulnerabilities/78124 https://www.htbridge.com/advisory/HTB23109 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2011-3768
https://notcve.org/view.php?id=CVE-2011-3768
Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files. Phorum v5.2.15a permite a atacantes remotos obtener información sensible a través de una petición directa a un archivo .php, lo que revela la ruta de instalación en un mensaje de error, como se demostró con css.php y algunos otros archivos. • http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/phorum-5.2.15a http://www.openwall.com/lists/oss-security/2011/06/27/6 https://exchange.xforce.ibmcloud.com/vulnerabilities/70604 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 84EXPL: 0CVE-2011-3392
https://notcve.org/view.php?id=CVE-2011-3392
Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the real_name parameter. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en control.php en controlcenter en Phorum antes de v5.2.17, permite a atacantes remotos ejecutar secuencias de comandos web o HTML a través del parámetro real_name. • http://holisticinfosec.org/content/view/184/45 http://secunia.com/advisories/45787 http://www.phorum.org/phorum5/read.php?64%2C149490%2C149490#msg-149490 http://www.securityfocus.com/bid/49347 https://exchange.xforce.ibmcloud.com/vulnerabilities/69456 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •