Description
Cross-site scripting (XSS) vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly.
References
- ADV-2007-0410 vdb-entry
- 22297 vdb-entry
- http://www.phorum.org/phorum5/read.php?12%2C119757
- 20070129 Phorum HTML Injection Vulnerability mailing-list
- 20070129 Re: Phorum HTML Injection Vulnerability mailing-list