CVE-2011-3382: XSS
Published Sep 8, 2011
·Updated
Cross-site scripting (XSS) vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
83 affected components
Phorum Phorum=5.2.10-rc1
Phorum Phorum=3.2.2
Phorum Phorum=5.0.15
Phorum Phorum=3.1.1_pre
Phorum Phorum=5.2.5
Phorum Phorum=5.0.1_alpha
Phorum Phorum=5.2.9
Phorum Phorum=5.2.12
Phorum Phorum=3.4.6
Phorum Phorum=5.2.2-beta
Phorum Phorum=3.2.3
Phorum Phorum=5.0.13a
Phorum Phorum=5.2.14
Phorum Phorum=5.0.15a
Phorum Phorum=3.2.7
Phorum Phorum=3.4.3
Phorum Phorum=5.0.2_alpha
Phorum Phorum=5.0.5_beta
Phorum Phorum=5.0.19
Phorum Phorum=5.1.13
Phorum Phorum=3.1.1
Phorum Phorum=3.2.8
Phorum Phorum=3.3.1a
Phorum Phorum=5.0.7a_beta
Phorum Phorum=3.4.4
Phorum Phorum=5.0.17
Phorum Phorum=5.0.17a
Phorum Phorum=3.3.1
Phorum Phorum=3.4
Phorum Phorum<=5.2.15
Phorum Phorum=3.3.2
Phorum Phorum=3.1.1_rc2
Phorum Phorum=5.1.25
Phorum Phorum=5.0.18
Phorum Phorum=5.0.4a_beta
Phorum Phorum=4.3.7
Phorum Phorum=3.0.7
Phorum Phorum=5.1.18
Phorum Phorum=5.2.4-rc2
Phorum Phorum=5.2.12a
Phorum Phorum=3.1.1a
Phorum Phorum=3.4.5
Phorum Phorum=5.2.3-rc1
Phorum Phorum=5.0.12
Phorum Phorum=5.0.20
Phorum Phorum=5.1.20
Phorum Phorum=3.4.8a
Phorum Phorum=3.2.5
Phorum Phorum=3.2.3a
Phorum Phorum=5.2
Phorum Phorum=5.2.10
Phorum Phorum=5.1.21
Phorum Phorum=5.0.0_alpha
Phorum Phorum=3.2
Phorum Phorum=5.2.13
Phorum Phorum=5.0.16
Phorum Phorum=5.0.10
Phorum Phorum=3.1.2
Phorum Phorum=5.0.11
Phorum Phorum=5.0.14a
Phorum Phorum=5.0.9
Phorum Phorum=3.1
Phorum Phorum=5.0.14
Phorum Phorum=5.0.7_beta
Phorum Phorum=5.1.14
Phorum Phorum=3.4.2
Phorum Phorum=5.0.6_beta
Phorum Phorum=5.1.17
Phorum Phorum=3.4.1
Phorum Phorum=3.4.7
Phorum Phorum=5.0.3_beta
Phorum Phorum=5.2.8
Phorum Phorum=3.4.8
Phorum Phorum=3.2.4
Phorum Phorum=5.0.4_beta
Phorum Phorum=5.0.13
Phorum Phorum=5.2.1
Phorum Phorum=5.0.8_rc
Phorum Phorum=5.2.11
Phorum Phorum=3.2.3b
Phorum Phorum=3.3.2b3
Phorum Phorum=3.3.2a
Phorum Phorum=3.2.6
Remediation
Patch Available
Event History
Sep 8, 2011
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3382?
CVE-2011-3382 is classified as a moderate severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2011-3382?
To fix CVE-2011-3382, you should upgrade to Phorum version 5.2.16 or later.
3
What software versions are affected by CVE-2011-3382?
CVE-2011-3382 affects various versions of Phorum including 5.2.14 and earlier, 5.1.x, 5.0.x, and some 3.x releases.
4
Can CVE-2011-3382 be exploited remotely?
Yes, CVE-2011-3382 can be exploited by remote attackers to inject arbitrary web scripts or HTML.
5
What type of vulnerability is CVE-2011-3382?
CVE-2011-3382 is a cross-site scripting (XSS) vulnerability that allows script injection.