4 results (0.002 seconds)

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2011-3622

https://notcve.org/view.php?id=CVE-2011-3622

22 Jan 2020 — A Cross-Site Scripting (XSS) vulnerability exists in the admin login screen in Phorum before 5.2.18. Se presenta una vulnerabilidad de Cross-Site Scripting (XSS) en la pantalla de inicio de sesión del administrador en Phorum versiones anteriores a 5.2.18. • https://www.openwall.com/lists/oss-security/2011/10/18/9 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 21EXPL: 0

CVE-2012-6659

https://notcve.org/view.php?id=CVE-2012-6659

19 Sep 2014 — Cross-site scripting (XSS) vulnerability in the admin interface in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Vulnerabilidad de XSS en la interfaz de administración en Phorum anterior a 5.2.19 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada. • http://secunia.com/advisories/50445 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 7%CPEs: 13EXPL: 5

CVE-2012-4234 – Phorum 5.2.18 - Multiple Cross-Site Scripting Vulnerabilities

https://notcve.org/view.php?id=CVE-2012-4234

04 Sep 2014 — Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via the group parameter. Vulnerabilidad de XSS en la pantalla de la moderación de grupos en el centro de control (control.php) en Phorum anterior a 5.2.19 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro group. • https://www.exploit-db.com/exploits/37683 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 84EXPL: 0

CVE-2011-3392

https://notcve.org/view.php?id=CVE-2011-3392

08 Sep 2011 — Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the real_name parameter. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en control.php en controlcenter en Phorum antes de v5.2.17, permite a atacantes remotos ejecutar secuencias de comandos web o HTML a través del parámetro real_name. • http://holisticinfosec.org/content/view/184/45 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •