Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
References
- 7572 vdb-entry
- 7576 vdb-entry
- 7573 vdb-entry
- 3288 third-party-advisory
- phorum-register-html-injection(12502) vdb-entry
- 7577 vdb-entry
- 7584 vdb-entry
- phorum-multiple-xss(12487) vdb-entry
- 20030513 Phorum Vulnerabilities mailing-list