CVE-2005-0784: XSS

Published Mar 20, 2005

Updated

Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control panel.

Affected Software

1 affected component

Phorum Phorum=5.0.14

Remediation

Patch Available

http://secunia.com/advisories/14554

Event History

Mar 20, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-0784?

CVE-2005-0784 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2005-0784?

To fix CVE-2005-0784, upgrade Phorum to version 5.0.15 or later, which addresses the XSS vulnerabilities.

What software versions are affected by CVE-2005-0784?

CVE-2005-0784 affects Phorum version 5.0.14 and earlier.

What types of attacks can CVE-2005-0784 enable?

CVE-2005-0784 can enable remote attackers to execute arbitrary scripts in the context of a user's session through cross-site scripting.

Where does CVE-2005-0784 allow XSS injection?

CVE-2005-0784 allows XSS injection via the subject line in the follow.php script and the user’s personal control panel.