CVE-2011-3392: XSS

Q: What is the severity of CVE-2011-3392?

CVE-2011-3392 is classified as a medium severity cross-site scripting (XSS) vulnerability.

Q: How do I fix CVE-2011-3392?

To fix CVE-2011-3392, you should upgrade Phorum to version 5.2.17 or later, where the vulnerability is addressed.

Q: What software versions are affected by CVE-2011-3392?

CVE-2011-3392 affects multiple versions of Phorum prior to 5.2.17, including versions 5.2.10-rc1, 5.0.1_alpha, and earlier.

Q: What types of attacks are possible due to CVE-2011-3392?

Due to CVE-2011-3392, attackers can inject arbitrary web scripts or HTML into the application, potentially compromising user data and security.

Q: Does CVE-2011-3392 require user interaction to exploit?

CVE-2011-3392 does not require user interaction to exploit, making it a significant security risk.

Published Sep 8, 2011

Updated

Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the realname parameter.

Affected Software

84 affected components

Phorum Phorum=5.2.10-rc1

Phorum Phorum=3.2.2

Phorum Phorum=5.0.15

Phorum Phorum=3.1.1_pre

Phorum Phorum=5.2.5

Phorum Phorum=5.0.1_alpha

Phorum Phorum<=5.2.16

Phorum Phorum=5.2.9

Phorum Phorum=5.2.12

Phorum Phorum=3.4.6

Phorum Phorum=5.2.2-beta

Phorum Phorum=5.2.15

Phorum Phorum=3.2.3

Phorum Phorum=5.0.13a

Phorum Phorum=5.2.14

Phorum Phorum=5.0.15a

Phorum Phorum=3.2.7

Phorum Phorum=3.4.3

Phorum Phorum=5.0.2_alpha

Phorum Phorum=5.0.5_beta

Phorum Phorum=5.0.19

Phorum Phorum=5.1.13

Phorum Phorum=3.1.1

Phorum Phorum=3.2.8

Phorum Phorum=3.3.1a

Phorum Phorum=5.0.7a_beta

Phorum Phorum=3.4.4

Phorum Phorum=5.0.17

Phorum Phorum=5.0.17a

Phorum Phorum=3.3.1

Phorum Phorum=3.4

Phorum Phorum=3.3.2

Phorum Phorum=3.1.1_rc2

Phorum Phorum=5.1.25

Phorum Phorum=5.0.18

Phorum Phorum=5.0.4a_beta

Phorum Phorum=4.3.7

Phorum Phorum=3.0.7

Phorum Phorum=5.1.18

Phorum Phorum=5.2.4-rc2

Phorum Phorum=5.2.12a

Phorum Phorum=3.1.1a

Phorum Phorum=3.4.5

Phorum Phorum=5.2.3-rc1

Phorum Phorum=5.0.12

Phorum Phorum=5.0.20

Phorum Phorum=5.1.20

Phorum Phorum=3.4.8a

Phorum Phorum=3.2.5

Phorum Phorum=3.2.3a

Phorum Phorum=5.2

Phorum Phorum=5.2.10

Phorum Phorum=5.1.21

Phorum Phorum=5.0.0_alpha

Phorum Phorum=3.2

Phorum Phorum=5.2.13

Phorum Phorum=5.0.16

Phorum Phorum=5.0.10

Phorum Phorum=3.1.2

Phorum Phorum=5.0.11

Phorum Phorum=5.0.14a

Phorum Phorum=5.0.9

Phorum Phorum=3.1

Phorum Phorum=5.0.14

Phorum Phorum=5.0.7_beta

Phorum Phorum=5.1.14

Phorum Phorum=3.4.2

Phorum Phorum=5.0.6_beta

Phorum Phorum=5.1.17

Phorum Phorum=3.4.1

Phorum Phorum=3.4.7

Phorum Phorum=5.0.3_beta

Phorum Phorum=5.2.8

Phorum Phorum=3.4.8

Phorum Phorum=3.2.4

Phorum Phorum=5.0.4_beta

Phorum Phorum=5.0.13

Phorum Phorum=5.2.1

Phorum Phorum=5.0.8_rc

Phorum Phorum=5.2.11

Phorum Phorum=3.2.3b

Phorum Phorum=3.3.2b3

Phorum Phorum=3.3.2a

Phorum Phorum=3.2.6

Remediation

Patch Available

http://www.phorum.org/phorum5/read.php?64,149490,149490#msg-149490

Event History

Sep 8, 2011

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-3392?

CVE-2011-3392 is classified as a medium severity cross-site scripting (XSS) vulnerability.

How do I fix CVE-2011-3392?

To fix CVE-2011-3392, you should upgrade Phorum to version 5.2.17 or later, where the vulnerability is addressed.

What software versions are affected by CVE-2011-3392?