CVE-2009-0488: XSS
Published Feb 9, 2009
·Updated
Cross-site scripting (XSS) vulnerability in Phorum before 5.2.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
76 affected components
Phorum Phorum<=5.2.10
Phorum Phorum=3.0.7
Phorum Phorum=3.1
Phorum Phorum=3.1.1
Phorum Phorum=3.1.1_pre
Phorum Phorum=3.1.1_rc2
Phorum Phorum=3.1.1a
Phorum Phorum=3.1.2
Phorum Phorum=3.2
Phorum Phorum=3.2.2
Phorum Phorum=3.2.3
Phorum Phorum=3.2.3a
Phorum Phorum=3.2.3b
Phorum Phorum=3.2.4
Phorum Phorum=3.2.5
Phorum Phorum=3.2.6
Phorum Phorum=3.2.7
Phorum Phorum=3.2.8
Phorum Phorum=3.3.1
Phorum Phorum=3.3.1a
Phorum Phorum=3.3.2
Phorum Phorum=3.3.2a
Phorum Phorum=3.3.2b3
Phorum Phorum=3.4
Phorum Phorum=3.4.1
Phorum Phorum=3.4.2
Phorum Phorum=3.4.3
Phorum Phorum=3.4.4
Phorum Phorum=3.4.5
Phorum Phorum=3.4.6
Phorum Phorum=3.4.7
Phorum Phorum=3.4.8
Phorum Phorum=3.4.8a
Phorum Phorum=4.3.7
Phorum Phorum=5.0.0_alpha
Phorum Phorum=5.0.1_alpha
Phorum Phorum=5.0.2_alpha
Phorum Phorum=5.0.3_beta
Phorum Phorum=5.0.4_beta
Phorum Phorum=5.0.4a_beta
Phorum Phorum=5.0.5_beta
Phorum Phorum=5.0.6_beta
Phorum Phorum=5.0.7_beta
Phorum Phorum=5.0.7a_beta
Phorum Phorum=5.0.8_rc
Phorum Phorum=5.0.9
Phorum Phorum=5.0.10
Phorum Phorum=5.0.11
Phorum Phorum=5.0.12
Phorum Phorum=5.0.13
Phorum Phorum=5.0.13a
Phorum Phorum=5.0.14
Phorum Phorum=5.0.14a
Phorum Phorum=5.0.15
Phorum Phorum=5.0.15a
Phorum Phorum=5.0.16
Phorum Phorum=5.0.17
Phorum Phorum=5.0.17a
Phorum Phorum=5.0.18
Phorum Phorum=5.0.19
Phorum Phorum=5.0.20
Phorum Phorum=5.1.13
Phorum Phorum=5.1.14
Phorum Phorum=5.1.17
Phorum Phorum=5.1.18
Phorum Phorum=5.1.20
Phorum Phorum=5.1.21
Phorum Phorum=5.1.25
Phorum Phorum=5.2
Phorum Phorum=5.2.1
Phorum Phorum=5.2.2-beta
Phorum Phorum=5.2.3-rc1
Phorum Phorum=5.2.4-rc2
Phorum Phorum=5.2.5
Phorum Phorum=5.2.8
Phorum Phorum=5.2.9
Event History
Feb 9, 2009
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0488?
CVE-2009-0488 has a severity rating of medium due to its cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2009-0488?
To fix CVE-2009-0488, you should upgrade to Phorum version 5.2.10 or later, which contains the necessary patches.
3
What types of attacks can CVE-2009-0488 enable?
CVE-2009-0488 can enable attackers to inject arbitrary web scripts or HTML, potentially leading to data theft or session hijacking.
4
Which versions of Phorum are affected by CVE-2009-0488?
CVE-2009-0488 affects versions of Phorum prior to 5.2.10, including 3.2.2, 5.0.15, and other specified versions.
5
Is CVE-2009-0488 a widely known vulnerability?
Yes, CVE-2009-0488 is recognized and documented in security databases and advisories, indicating it is a known issue in older Phorum versions.