CVE-2004-1822: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTPREFERER parameter to login.php, (2) HTTPREFERER parameter to register.php, or (3) target parameter to profile.php.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What are the primary vulnerabilities associated with CVE-2004-1822?
CVE-2004-1822 includes multiple cross-site scripting vulnerabilities via HTTP_REFERER and target parameters in Phorum's login, registration, and profile pages.
Which Phorum versions are affected by CVE-2004-1822?
CVE-2004-1822 affects Phorum versions from 3.1 through 5.0.3 beta.
What can attackers exploit in CVE-2004-1822?
Attackers can exploit CVE-2004-1822 to inject arbitrary web scripts or HTML into vulnerable Phorum pages.
How can I prevent CVE-2004-1822 vulnerabilities in Phorum?
To prevent CVE-2004-1822 vulnerabilities, sanitize user input and validate HTTP_REFERER and target parameters correctly.
What severity level is assigned to CVE-2004-1822?
CVE-2004-1822 is considered a medium severity vulnerability due to its potential for exploitation in cross-site scripting attacks.