Unscored CVE-2004-2241 EUVD-2004-2233GHSA-4h6q-86g4-5cr7

Cross-site scripting (XSS) vulnerability in Phorum 5.0.11 and earlier allows remote attackers to inject arbitrary HTML or web script via se…

Published Jul 17, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Phorum 5.0.11 and earlier allows remote attackers to inject arbitrary HTML or web script via search.php. NOTE: some sources have reported that the affected file is read.php, but this is inconsistent with the vendor's patch.

References

http://phorum.org/cvs-changelog-5.txt
11538 vdb-entry
1011921 vdb-entry
phorum-xss(17846) vdb-entry
12980 third-party-advisory