CVE-2003-1467: XSS
First published: Wed Dec 31 2003(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | ||
| Microsoft Windows | ||
| Unix | =any_version | |
| Phorum | <=3.4.2 | |
| Phorum | =3.4 | |
| Phorum | =3.4.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/archive/1/321310
- http://www.securityfocus.com/bid/7572
- http://www.securityfocus.com/bid/7573
- http://www.securityfocus.com/bid/7576
- http://www.securityfocus.com/bid/7577
- http://www.securityfocus.com/bid/7584
- http://securityreason.com/securityalert/3288
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12502
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12487
Frequently Asked Questions
What is the severity of CVE-2003-1467?
CVE-2003-1467 has been rated as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2003-1467?
To remediate CVE-2003-1467, you should upgrade Phorum to version 3.4.3 or later.
What components of Phorum are affected by CVE-2003-1467?
CVE-2003-1467 affects login.php, register.php, post.php, and common.php in Phorum versions prior to 3.4.3.
Can CVE-2003-1467 be exploited remotely?
Yes, CVE-2003-1467 can be exploited remotely by injecting arbitrary web scripts or HTML.
What are the potential impacts of CVE-2003-1467?
The impacts of CVE-2003-1467 include site defacement, cookie theft, and phishing attacks through cross-site scripting.
- collector/nvd-historical
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/description
- agent/author
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/linux
- canonical/linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/unix
- canonical/unix
- version/unix/any_version
- vendor/phorum
- canonical/phorum
- version/phorum/3.4.2
- version/phorum/3.4
- version/phorum/3.4.1