Unscored CVE-2005-0784 EUVD-2005-0785GHSA-66fw-92hh-gx2w

Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML v…

Published Mar 20, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control panel.

References

12800 vdb-entry
14554 third-party-advisory
20050313 3 XSS Vulnerabilities in Phorum <= 5.0.14 mailing-list