CVE-2005-2836

Published: Sep 7, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to register.php or (2) a signature of a logged-in user in "My Control Center," which is not properly handled by control.php.

Affected (42)

Products: Phorum: Phorum

Phorum

1 product

Phorum

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Phorum Phorum	Version 3.1.1
Phorum Phorum	Version 3.1.1_pre
Phorum Phorum	Version 3.1.1_rc2
Phorum Phorum	Version 3.1.1a
Phorum Phorum	Version 3.1.2
Phorum Phorum	Version 3.1
Phorum Phorum	Version 3.2.2
Phorum Phorum	Version 3.2.3
Phorum Phorum	Version 3.2.3a
Phorum Phorum	Version 3.2.3b
Phorum Phorum	Version 3.2.4
Phorum Phorum	Version 3.2.5
Phorum Phorum	Version 3.2.6
Phorum Phorum	Version 3.2.7
Phorum Phorum	Version 3.2.8
Phorum Phorum	Version 3.2
Phorum Phorum	Version 3.3.1
Phorum Phorum	Version 3.3.1a
Phorum Phorum	Version 3.3.2
Phorum Phorum	Version 3.3.2a
Phorum Phorum	Version 3.3.2b3
Phorum Phorum	Version 3.4.1
Phorum Phorum	Version 3.4.2
Phorum Phorum	Version 3.4.3
Phorum Phorum	Version 3.4.4
Phorum Phorum	Version 3.4.5
Phorum Phorum	Version 3.4.6
Phorum Phorum	Version 3.4.7
Phorum Phorum	Version 3.4.8
Phorum Phorum	Version 3.4
Phorum Phorum	Version 4.3.7
Phorum Phorum	Version 5.0.10
Phorum Phorum	Version 5.0.11
Phorum Phorum	Version 5.0.12
Phorum Phorum	Version 5.0.14
Phorum Phorum	Version 5.0.14a
Phorum Phorum	Version 5.0.15
Phorum Phorum	Version 5.0.16
Phorum Phorum	Version 5.0.17
Phorum Phorum	Version 5.0.3_beta
Phorum Phorum	Version 5.0.7_beta
Phorum Phorum	Version 5.0.9