CVE-2012-4234: XSS
Published Sep 4, 2014
·Updated
Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via the group parameter.
Affected Software
13 affected components
Phorum Phorum<=5.2.18
Phorum Phorum=5.2
Phorum Phorum=5.2.1
Phorum Phorum=5.2.10
Phorum Phorum=5.2.10-rc1
Phorum Phorum=5.2.11
Phorum Phorum=5.2.12
Phorum Phorum=5.2.12-a
Phorum Phorum=5.2.13
Phorum Phorum=5.2.14
Phorum Phorum=5.2.15
Phorum Phorum=5.2.15-a
Phorum Phorum=5.2.16
Remediation
Patch Available
Event History
Sep 4, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4234?
CVE-2012-4234 is classified as a medium severity Cross-Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2012-4234?
To fix CVE-2012-4234, upgrade Phorum to version 5.2.19 or later.
3
Who is affected by CVE-2012-4234?
CVE-2012-4234 affects all versions of Phorum prior to 5.2.19.
4
What types of attacks can CVE-2012-4234 facilitate?
CVE-2012-4234 can facilitate remote attackers in injecting arbitrary web scripts or HTML.
5
Where in Phorum does CVE-2012-4234 exist?
CVE-2012-4234 exists in the group moderation screen of the control center in Phorum.