CVE-2005-0784

Published: May 2, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control panel.

Affected (1)

Products: Phorum: Phorum

Phorum

1 product

Phorum

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Phorum Phorum	Version 5.0.14

References (6)

http://marc.info/?l=bugtraq&m=111083279031544&w=2

Source: cve@mitre.org

http://secunia.com/advisories/14554

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/12800

Source: cve@mitre.org

Exploit

http://marc.info/?l=bugtraq&m=111083279031544&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/14554

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/12800

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.