CVE-2010-1629: XSS
Published May 19, 2010
·Updated
Cross-site scripting (XSS) vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address.
Affected Software
82 affected components
Phorum Phorum<=5.2.14
Phorum Phorum=3.0.7
Phorum Phorum=3.1
Phorum Phorum=3.1.1
Phorum Phorum=3.1.1_pre
Phorum Phorum=3.1.1_rc2
Phorum Phorum=3.1.1a
Phorum Phorum=3.1.2
Phorum Phorum=3.2
Phorum Phorum=3.2.2
Phorum Phorum=3.2.3
Phorum Phorum=3.2.3a
Phorum Phorum=3.2.3b
Phorum Phorum=3.2.4
Phorum Phorum=3.2.5
Phorum Phorum=3.2.6
Phorum Phorum=3.2.7
Phorum Phorum=3.2.8
Phorum Phorum=3.3.1
Phorum Phorum=3.3.1a
Phorum Phorum=3.3.2
Phorum Phorum=3.3.2a
Phorum Phorum=3.3.2b3
Phorum Phorum=3.4
Phorum Phorum=3.4.1
Phorum Phorum=3.4.2
Phorum Phorum=3.4.3
Phorum Phorum=3.4.4
Phorum Phorum=3.4.5
Phorum Phorum=3.4.6
Phorum Phorum=3.4.7
Phorum Phorum=3.4.8
Phorum Phorum=3.4.8a
Phorum Phorum=4.3.7
Phorum Phorum=5.0.0_alpha
Phorum Phorum=5.0.1_alpha
Phorum Phorum=5.0.2_alpha
Phorum Phorum=5.0.3_beta
Phorum Phorum=5.0.4_beta
Phorum Phorum=5.0.4a_beta
Phorum Phorum=5.0.5_beta
Phorum Phorum=5.0.6_beta
Phorum Phorum=5.0.7_beta
Phorum Phorum=5.0.7a_beta
Phorum Phorum=5.0.8_rc
Phorum Phorum=5.0.9
Phorum Phorum=5.0.10
Phorum Phorum=5.0.11
Phorum Phorum=5.0.12
Phorum Phorum=5.0.13
Phorum Phorum=5.0.13a
Phorum Phorum=5.0.14
Phorum Phorum=5.0.14a
Phorum Phorum=5.0.15
Phorum Phorum=5.0.15a
Phorum Phorum=5.0.16
Phorum Phorum=5.0.17
Phorum Phorum=5.0.17a
Phorum Phorum=5.0.18
Phorum Phorum=5.0.19
Phorum Phorum=5.0.20
Phorum Phorum=5.1.13
Phorum Phorum=5.1.14
Phorum Phorum=5.1.17
Phorum Phorum=5.1.18
Phorum Phorum=5.1.20
Phorum Phorum=5.1.21
Phorum Phorum=5.1.25
Phorum Phorum=5.2
Phorum Phorum=5.2.1
Phorum Phorum=5.2.2-beta
Phorum Phorum=5.2.3-rc1
Phorum Phorum=5.2.4-rc2
Phorum Phorum=5.2.5
Phorum Phorum=5.2.8
Phorum Phorum=5.2.9
Phorum Phorum=5.2.10
Phorum Phorum=5.2.10-rc1
Phorum Phorum=5.2.11
Phorum Phorum=5.2.12
Phorum Phorum=5.2.12a
Phorum Phorum=5.2.13
Remediation
Patch Available
Event History
May 19, 2010
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1629?
CVE-2010-1629 is classified as a medium severity Cross-site Scripting (XSS) vulnerability.
2
How do I fix CVE-2010-1629?
To fix CVE-2010-1629, upgrade Phorum to version 5.2.15 or later, which includes patches for this vulnerability.
3
Which versions of Phorum are affected by CVE-2010-1629?
CVE-2010-1629 affects multiple versions of Phorum prior to 5.2.15, including versions 5.2.10, 5.2.5, and 3.2.2.
4
What type of attack does CVE-2010-1629 enable?
CVE-2010-1629 allows remote attackers to inject arbitrary web scripts or HTML into the Phorum application.
5
Can CVE-2010-1629 be exploited silently?
Yes, CVE-2010-1629 can potentially be exploited silently to execute malicious scripts on behalf of users accessing the affected Phorum application.